Last week, the European Parliament's Civil Liberties Committee ("LIBE") issued a report into the US National Security Agency ("NSA") and EU member states' surveillance of EU citizens (the "Report").
Last week, the European Parliament's Civil Liberties Committee ("LIBE") issued a report into the US National Security Agency ("NSA") and EU member states' surveillance of EU citizens (the "Report"). The Report was passed by 33 votes to 7 with 17 abstentions questioning whether data protection rules should be included in the trade negotiations with the US. The release of the report comes at a crucial time for both Europe and the US but what does this announcement really tell us about the future of international data flows in the eyes of the EU and the EU's relationship with the US?
Background to the Report
The Report follows the US Federal Trade Commission ("FTC")'s recent response to criticisms from the European Commission and European Parliament following the NSA scandal and subsequent concerns regarding Safe Harbor (for more information on the FTC – see this previous article). The Report calls into question recent revelations by whistleblowers and journalists about the extent of mass surveillance activities by governments. In addition, the LIBE Committee argues that the extent of the blanket data collection, highlighted by the NSA allegations, goes far beyond what would be reasonably expected to counter terrorism and other major security threats. The Report also criticises the international arrangements between the EU and the US, and states that these mechanisms "have failed to provide for the necessary checks and balances and for democratic accountability".
LIBE Committee's Recommendations
In order to address the deficiencies highlighted in the Report and to restore trust between the EU and the US, the LIBE Committee proposes several recommendations with a view to preserving the right to privacy and the integrity of EU citizens' data, including:
Restoring trust
The LIBE Committee's recommendations were widely criticised by politicians for being disproportionate and unrealistic. EU politicians also commented that the Report sets unachievable deadlines and appears to be a step backwards in the debate and, more importantly, in achieving a solution. One of the most controversial proposals in the Report consists of effectively 'shutting off' all data transfers to the US. This could have the counterproductive effect of isolating Europe and would not serve the purpose of achieving an international free flow of data in a truly digital society as is anticipated by the EU data protection reform.
Consequences for Safe Harbor?
The Report serves to communicate further public criticism about the NSA's alleged intelligence overreaching. Whatever the LIBE Committee's position, it is highly unlikely that as a result Safe Harbor will be suspended or repealed – far too many US-led businesses are dependent upon it for their data flows from the EU, meaning a suspension of Safe Harbor would have a very serious impact on transatlantic trade. Nevertheless, as a consequence of these latest criticisms, it is now more likely than ever that the EU/US Safe Harbor framework will undergo some changes in the near future. As to what, precisely, these will be, only time will tell – though more active FTC enforcement of Safe Harbor breaches now seems inevitable.
Background to the Report
The Report follows the US Federal Trade Commission ("FTC")'s recent response to criticisms from the European Commission and European Parliament following the NSA scandal and subsequent concerns regarding Safe Harbor (for more information on the FTC – see this previous article). The Report calls into question recent revelations by whistleblowers and journalists about the extent of mass surveillance activities by governments. In addition, the LIBE Committee argues that the extent of the blanket data collection, highlighted by the NSA allegations, goes far beyond what would be reasonably expected to counter terrorism and other major security threats. The Report also criticises the international arrangements between the EU and the US, and states that these mechanisms "have failed to provide for the necessary checks and balances and for democratic accountability".
LIBE Committee's Recommendations
In order to address the deficiencies highlighted in the Report and to restore trust between the EU and the US, the LIBE Committee proposes several recommendations with a view to preserving the right to privacy and the integrity of EU citizens' data, including:
- US authorities and EU Member States should prohibit blanket mass surveillance activities and bulk processing of personal data;
- The Safe Harbor framework should be suspended, and all transfers currently operating under this mechanism should stop immediately;
- The status of New Zealand and Canada as 'adequate' jurisdictions for the purposes of data transfers should be reassessed;
- The adoption of the draft EU Data Protection Regulation should be accelerated;
- The establishment of the European Cloud Partnership must be fast-tracked;
- A framework for the protection of whistle-blowers must be established;
- An autonomous EU IT capability must be developed by September 2014, including ENISA minimum security and privacy standards for IT networks;
- The EU Commission must present an European strategy for democratic governance of the Internet by January 2015; and
- EU Member States should develop a coherent strategy with the UN, including support of the UN resolution on 'the right to privacy in the digital age'.
Restoring trust
The LIBE Committee's recommendations were widely criticised by politicians for being disproportionate and unrealistic. EU politicians also commented that the Report sets unachievable deadlines and appears to be a step backwards in the debate and, more importantly, in achieving a solution. One of the most controversial proposals in the Report consists of effectively 'shutting off' all data transfers to the US. This could have the counterproductive effect of isolating Europe and would not serve the purpose of achieving an international free flow of data in a truly digital society as is anticipated by the EU data protection reform.
Consequences for Safe Harbor?
The Report serves to communicate further public criticism about the NSA's alleged intelligence overreaching. Whatever the LIBE Committee's position, it is highly unlikely that as a result Safe Harbor will be suspended or repealed – far too many US-led businesses are dependent upon it for their data flows from the EU, meaning a suspension of Safe Harbor would have a very serious impact on transatlantic trade. Nevertheless, as a consequence of these latest criticisms, it is now more likely than ever that the EU/US Safe Harbor framework will undergo some changes in the near future. As to what, precisely, these will be, only time will tell – though more active FTC enforcement of Safe Harbor breaches now seems inevitable.