I’ve written before about the use of US cloud services within EU and how that goes against the GDPR, even with all the attempts to create exceptions. The latest exception was being challenged, but hinged on a few things that the new US administration is tearing down.
EuroActiv has a nice new article about all of this:
https://www.euractiv.com/section/tech/news/deafening-commission-silence-with-no-credible-eu-us-data-oversight-left/
The most important thing there, for me, is at the end:
“if the EU executive does scrap the deal, it will undoubtedly be seen as a political move against Washington. Better to say and do nothing in the meantime, seems to be the policy.
But silence can’t last forever.
On 5 February, 19 MEPs from across the political spectrum called on the Commission to address the question of whether the DPF is still viable. The Commission has until 19 March to respond in writing.
On 6 February, the chair of the Civil Liberties, Justice and Home Affairs (LIBE) Committee wrote to Commissioner McGrath asking whether the DPF still meets the essential equivalence requirement established by the ECJ after the PCLOB shootings and whether this affects the validity of the DPF.
Schrems told Euractiv that the Commission’s silence could leave companies in the legal limbo of an invalidated DPF.
“My biggest worry… is that there is no fucking contingency plan,” he said.”
