The European Parliament's Committee on Civil Liberties, Justice and Home Affairs (Libe) recently approved a critical resolution on the EU-US Data Privacy Framework (DPF).
The resolution considers the DPF insufficient to ensure the data protection of European citizens in the US. It also mentions the risk that the European Court of Justice will declare the DPF invalid. The so-called EU-US Data Privacy Framework (DPF) is supposed to replace the Safe Harbor and Privacy Shield agreements. These were previously declared invalid by the European Court.
Libe reported to the European Commission back in February of this year that the DPF would contain too few safeguards to protect EU residents from large-scale collection of personal data. Also, according to Libe, the text would not mention arrangements for independent control mechanisms prior to data collection, nor how long data could be kept.
Since the Privacy Shield is no longer valid, it is only possible for organizations to export personal data from the EU to the U.S. through a transfer contract. Additional measures are also needed to ensure that those personal data are secure. The decision on the implementation of DPF lies with the European Commission and the European Council.
