Blog
On 16 July 2020, the European Court of Justice ruled in the Schrems case that the transfer of personal data to the US via the so-called "Privacy Shield" is not permissible. What does this ruling mean for Facebook and other services that routinely do business with American companies?
The history of the Schrems case goes back to 2010 when Mr. Schrems, as an Austrian citizen, filed a complaint against Facebook Ltd. based in Ireland. In his complaint Mr. Schrems contended that Facebook transfers his personal data to its parent company Facebook Inc. in the US. Irish Facebook had argued that the transfer is permitted under the so-called "Safe Harbor" decision of the European Commission, which allows the transfer to the US. The case then came before the European Court of Justice, which declared the "Safe Harbor" provisions invalid in 2015. "Safe Harbor" has been replaced by an improved "Privacy Shield", but that has also been annulled as of this day.
In the first ruling in 2015, the European Court of Justice concluded that the US must ensure a "substantially equivalent" level of personal data protection as required by European law. However, legislation that guarantees US public authorities generalized access to personal data is in conflict with EU fundamental rights. The court also did not like the fact that the foreigners concerned had no opportunity to review the processing of their data. That is why "Safe Harbor" has been replaced by an improved "Privacy Shield". There were already some possibilities to demand a review of the processing of personal data by the US authorities. However, the possibility for the US authorities to obtain the personal data of foreigners without any reason still remains.
The current dispute between Mr Schrems, resp. The Data Protection Authority of Ireland and Facebook are about the same issue, namely the transfer of personal data to the US. The court primarily reviewed the "Privacy Shield", which it annulled. The legal basis for many companies to transfer personal data to the US has thus been removed. Furthermore, the court also dealt with the amendment of the so-called standard contractual clauses. The court came to the conclusion that in some cases, it is possible to use them when transferring to other states. Standard contractual clauses continue to remain the legal basis for transfers, but supervisors can now examine whether these clauses are in conflict with the law of the country to which the personal data is proposed to be transferred. We are therefore moving towards further disputes concerning standard contractual clauses in relation to a specific state.
This ground-breaking decision will make it more difficult to transfer personal data between friendly companies in Europe and the US, and may lead to further fragmentation of services. In our opinion, the Companies will come up with different solutions or versions of their products for Europe and the USA. Perhaps the future Facebook will not be the same in Europe as it is in America.
More articles:
Stewarts
'No one has done as much for me as you,' Eva said.
Stewarts
"A visit to her daughter in London turned Eva's life upside down when she says she stepped into a crossing on a green light but was hit by a car. Despite her remarkable bravery, she faced a long treatment due to fractures in her pelvis, and the associated limitations and pain are likely to persist for the rest of her life. Regular headaches and impaired concentration compound her challenges.
Eva contacted us through an organization temporarily helping her manage her difficult living situation. At that time, she was destitute, relying only on subsistence payments. We were able to assist her because we specialize in personal injury and have contacts with proven colleagues abroad.
We worked with Stewarts, a UK law firm, on this case. Attorneys Klára Dvořáková and Rebecca Huxford helped Eva with the documentation in her case, explaining her options and the differences between the Czech and British systems of healthcare and social benefits reimbursement. Within a few months, thanks to the professional cooperation between the two offices, an offer of compensation from the insurance company of approximately CZK seven million was achieved. The client accepted this settlement because she did not want to deal with courts in the United Kingdom.
Subsequently, we assisted the client with related tax issues and contacted Auditone, a tax consultancy firm, which arranged for the filing of a tax return. Compensation for lost income is taxable, unlike most personal injury compensation.
'No one has done as much for me as you,' Eva said.
The fact that we were able to help Eva gives our work meaning and brings us great joy. We are very happy that, thanks to our many years of active involvement in the international professional organization PEOPIL, we can cooperate on such cases."
Livingstone, Tour Operator
Thank you again for your valuable advice. I breathe better when I know who to turn to.
Livingstone, Tour Operator
"Thank you again for your valuable advice. I breathe better when I know who to turn to."
Anders Thorsen Advokatanpartsselskab
It has been an absolute pleasure to work with you.
Anders Thorsen Advokatanpartsselskab
"It has been an absolute pleasure to work with you and your colleagues. Your advice and way of handling the matter and our communication has been of the highest quality and we are very happy with the outcome.
If any of my clients need assistance in matters in the Czech Republic in the future, I know who to recommend."