{"id":24921,"date":"2023-07-28T07:27:34","date_gmt":"2023-07-28T14:27:34","guid":{"rendered":"https:\/\/www.privateinternetaccess.com\/blog\/?p=24921"},"modified":"2023-08-02T22:18:00","modified_gmt":"2023-08-02T22:18:00","slug":"third-time-lucky-for-transatlantic-data-transfer-framework","status":"publish","type":"post","link":"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/","title":{"rendered":"Third Time Lucky for Transatlantic Data Transfer Framework? Max Schrems Doesn\u2019t Think So"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The European Commission has just adopted a new \u201c<a href=\"https:\/\/ec.europa.eu\/commission\/presscorner\/detail\/en\/IP_23_3721\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">adequacy<\/a>\u201d decision to keep personal data flowing between the EU and the US. The stakes are high: according to the Commission, data flows underpin nearly <a href=\"https:\/\/ec.europa.eu\/commission\/presscorner\/detail\/en\/fs_23_3754\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">one trillion euros in cross-border commerce<\/a> each year. Under the EU\u2019s General Data Protection Regulation (<a href=\"https:\/\/www.privateinternetaccess.com\/blog\/?s=gdpr\">GDPR<\/a>), personal data may not be transferred from the EU to another country unless the latter\u2019s privacy protections are \u201cadequate\u201d \u2013 which means roughly equivalent to those provided by the GDPR. Without an appropriate framework, those data flows would be illegal, and any company making them would be at risk of legal sanctions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Drawing up a data transfer framework between the EU and the US that provides adequate privacy protections is proving extremely difficult. <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/biden-eu-us-data-privacy-framework\/\">As we wrote last year<\/a>, the previous two attempts to regulate data flows across the Atlantic, principally from the EU to the US, were both struck down by the EU\u2019s highest court, the Court of Justice of the European Union (CJEU). The <a href=\"https:\/\/curia.europa.eu\/jcms\/upload\/docs\/application\/pdf\/2015-10\/cp150117en.pdf\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Safe Harbor<\/a> framework was thrown out in 2015, and the <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/top-eu-court-sinks-main-framework-for-sending-personal-data-across-the-atlantic\/\">Privacy Shield<\/a> followed in 2020.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The underlying problem is the <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/how-a-few-thoughtless-words-about-privacy-led-to-huge-political-and-economic-headaches-for-the-us-and-eu\/\">US surveillance<\/a> revealed by Edward Snowden in 2013. The US wants to carrying on spying for reasons of national security, but the GDPR says that EU personal data must be protected from (most) spying in the US. The new Data Privacy Framework is an attempt to reconcile these two things. Central to that is a new <a href=\"https:\/\/www.whitehouse.gov\/briefing-room\/presidential-actions\/2022\/10\/07\/executive-order-on-enhancing-safeguards-for-united-states-signals-intelligence-activities\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Executive Order issued by President Biden<\/a> on \u201cEnhancing Safeguards for the United States Signals Intelligence Activities.\u201d Just recently, the Office of the Director of National Intelligence released the <a href=\"https:\/\/www.intel.gov\/ic-on-the-record-database\/results\/oversight\/1278-odni-releases-ic-procedures-implementing-new-safeguards-in-executive-order-14086\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">US intelligence community policies and procedures<\/a> to implement the privacy and civil liberties safeguards specified in the Executive Order (EO).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When the EO was released last year, groups like BEUC, the umbrella group for 46 independent consumer organizations from 32 European countries, pointed out that there were fundamental differences in the level of privacy and data protection in the US and EU that <a href=\"https:\/\/www.beuc.eu\/press-releases\/blueprint-new-eu-us-data-transfer-agreement-still-lacks-sufficient-protections-eu\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">remained unaddressed<\/a> by the additional safeguards.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Since then, two important EU bodies have offered their views. The European Data Protection Board (<a href=\"https:\/\/www.edpb.europa.eu\/about-edpb\/who-we-are\/edpb-chairmanship_en\">EDPB<\/a>) oversees implementation of the GDPR, and <a href=\"https:\/\/edpb.europa.eu\/news\/news\/2023\/edpb-welcomes-improvements-under-eu-us-data-privacy-framework-concerns-remain_en\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">expressed its concerns<\/a> about the new framework, regarding \u201ccertain rights of data subjects, onward transfers, the scope of exemptions, temporary bulk collection of data and the practical functioning of the redress mechanism.\u201d The European Parliament was even more doubtful that it would work. In <a href=\"https:\/\/www.europarl.europa.eu\/doceo\/document\/TA-9-2023-0204_EN.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">a resolution passed in May<\/a>, the European Parliament found:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">that the EU-US Data Privacy Framework fails to create essential equivalence in the level of protection; calls on the [European] Commission to continue negotiations with its US counterparts with the aim of creating a mechanism that would ensure such equivalence and which would provide the adequate level of protection required by Union data protection law and the Charter as interpreted by the CJEU; calls on the Commission not to adopt the adequacy finding until all the recommendations made in this resolution and the EDPB opinion are fully implemented;<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">It was worried that the Data Privacy Framework in its current form would be challenged before the CJEU, leading to yet more uncertainty for businesses that must depend on it to ensure their transatlantic transfers are permitted. That seems certain, because the person who brought down the two previous frameworks \u2013 <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/?s=schrems\">Max Schrems<\/a> \u2013 has already said that is <a href=\"https:\/\/noyb.eu\/en\/european-commission-gives-eu-us-data-transfers-third-round-cjeu\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">precisely what he intends to do<\/a> with his organisation:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">We have various options for a challenge already in the drawer, although we are sick and tired of this legal ping-pong [after the previous successful challenges]. We currently expect this to be back at the Court of Justice by the beginning of next year. The Court of Justice could then even suspend the new deal while it is reviewing the substance of it.<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">Like BEUC, the EDPB, and the European Parliament, Schrems believes that the new EU-US Data Privacy Framework lacks the necessary privacy protections for EU citizens. In <a href=\"https:\/\/noyb.eu\/en\/european-commission-gives-eu-us-data-transfers-third-round-cjeu\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">his commentary on the new framework<\/a>, which explains in more detail why he believes it to be unsatisfactory, Schrems says:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">Overall the new \u201cTrans-Atlantic Data Privacy Framework\u201d is a copy of Privacy Shield (from 2016), which in turn was a copy of \u201cSafe Harbor\u201d (from 2000). Given that this approach has failed twice before, there was no legal basis for the change of course \u2013 the only logic of having a deal was political.<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">The many \u2013 and successful \u2013 <a href=\"https:\/\/noyb.eu\/en\/project\/eu-us-transfers\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">legal actions<\/a> that Schrems and his organization have brought mean that it is likely that he will indeed go ahead and mount this new challenge. Moreover, his impressive track record of overturning the past frameworks \u2013 and winning other crucial privacy battles at the CJEU, discussed on PIA blog over the years \u2013 means that his opinion that the latest approach will also fall deserves to be taken seriously.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The ramifications of such a third failure would be wide. It would mean that many companies transferring personal EU data across the Atlantic would need to find another approach, for example by storing all relevant personal data within the EU. That\u2019s something companies have resisted doing, but soon they may not have much choice. This argument over what constitutes adequate privacy protection in the US has been going on for nearly a decade, but it is not over yet. And with a trillion euros of data flows at stake, it could hardly be more significant for US and EU companies.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Featured image created with\u00a0<a href=\"https:\/\/huggingface.co\/spaces\/stabilityai\/stable-diffusion\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Stable Diffusion<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The European Commission has just adopted a new \u201cadequacy\u201d decision to keep personal data flowing between the EU and the US. The stakes are high: according to the Commission, data flows underpin nearly one trillion euros in cross-border commerce each year. Under the EU\u2019s General Data Protection Regulation (GDPR), personal data may not be transferred &hellip; <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Third Time Lucky for Transatlantic Data Transfer Framework? Max Schrems Doesn\u2019t Think So&#8221;<\/span><\/a><\/p>\n","protected":false},"author":20,"featured_media":24924,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_stopmodifiedupdate":false,"_modified_date":"","footnotes":""},"categories":[1,2900,1792],"tags":[1642,2696,544,2891,2911,2256,2064,2053,485,681,612,611,609],"class_list":["post-24921","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-general-thought-leadership","category-privacy-news-online","tag-adequacy","tag-beuc","tag-cjeu","tag-data-privacy-framework","tag-data-transfers","tag-edpb","tag-european-commission","tag-european-parliament","tag-gdpr","tag-max-schrems","tag-privacy-shield","tag-safe-harbor","tag-us"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.9 (Yoast SEO v26.9) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Third Time Lucky for Transatlantic Data Transfer Framework? Max Schrems Doesn\u2019t Think So<\/title>\n<meta name=\"description\" content=\"The European Commission has just adopted a new \u201cadequacy\u201d decision to keep personal data flowing between the EU and the US. The stakes are high: according\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Third Time Lucky for Transatlantic Data Transfer Framework? Max Schrems Doesn\u2019t Think So\" \/>\n<meta property=\"og:description\" content=\"The European Commission has just adopted a new \u201cadequacy\u201d decision to keep personal data flowing between the EU and the US. The stakes are high: according\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/\" \/>\n<meta property=\"og:site_name\" content=\"PIA\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/privateinternetaccess\/\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-28T14:27:34+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-02T22:18:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2023\/07\/transatlantic-liner.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1488\" \/>\n\t<meta property=\"og:image:height\" content=\"1052\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Glyn Moody\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@http:\/\/twitter.com\/glynmoody\" \/>\n<meta name=\"twitter:site\" content=\"@buyvpnservice\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Glyn Moody\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/\"},\"author\":{\"name\":\"Glyn Moody\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775\"},\"headline\":\"Third Time Lucky for Transatlantic Data Transfer Framework? Max Schrems Doesn\u2019t Think So\",\"datePublished\":\"2023-07-28T14:27:34+00:00\",\"dateModified\":\"2023-08-02T22:18:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/\"},\"wordCount\":919,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2023\/07\/transatlantic-liner.png\",\"keywords\":[\"adequacy\",\"beuc\",\"cjeu\",\"data privacy framework\",\"data transfers\",\"edpb\",\"european commission\",\"european parliament\",\"gdpr\",\"max schrems\",\"Privacy Shield\",\"Safe Harbor\",\"US\"],\"articleSection\":[\"General Privacy News\",\"General Thought Leadership\",\"Privacy News Online\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/\",\"name\":\"Third Time Lucky for Transatlantic Data Transfer Framework? Max Schrems Doesn\u2019t Think So\",\"isPartOf\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2023\/07\/transatlantic-liner.png\",\"datePublished\":\"2023-07-28T14:27:34+00:00\",\"dateModified\":\"2023-08-02T22:18:00+00:00\",\"description\":\"The European Commission has just adopted a new \u201cadequacy\u201d decision to keep personal data flowing between the EU and the US. The stakes are high: according\",\"breadcrumb\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/#primaryimage\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2023\/07\/transatlantic-liner.png\",\"contentUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2023\/07\/transatlantic-liner.png\",\"width\":1488,\"height\":1052},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.privateinternetaccess.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Third Time Lucky for Transatlantic Data Transfer Framework? Max Schrems Doesn\u2019t Think So\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#website\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/\",\"name\":\"PIA\",\"description\":\"Online privacy news from around the world.\",\"publisher\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.privateinternetaccess.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\",\"name\":\"Private Internet Access\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png\",\"contentUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png\",\"width\":1200,\"height\":1200,\"caption\":\"Private Internet Access\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/privateinternetaccess\/\",\"https:\/\/x.com\/buyvpnservice\",\"https:\/\/www.instagram.com\/piavpn\/\",\"https:\/\/www.youtube.com\/channel\/UClyJZ47Rizb1xnwuKXDI0_w\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775\",\"name\":\"Glyn Moody\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g\",\"caption\":\"Glyn Moody\"},\"description\":\"Glyn Moody is a freelance journalist who writes and speaks about privacy, surveillance, digital rights, open source, copyright, patents and general policy issues involving digital technology. He started covering the business use of the Internet in 1994, and wrote the first mainstream feature about Linux, which appeared in Wired in August 1997. His book, \\\"Rebel Code,\\\" is the first and only detailed history of the rise of open source, while his subsequent work, \\\"The Digital Code of Life,\\\" explores bioinformatics - the intersection of computing with genomics.\",\"sameAs\":[\"http:\/\/opendotdotdot.blogspot.com\/\",\"https:\/\/www.linkedin.com\/in\/glynmoody\/\",\"https:\/\/x.com\/http:\/\/twitter.com\/glynmoody\"],\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/author\/glynmoody\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Third Time Lucky for Transatlantic Data Transfer Framework? Max Schrems Doesn\u2019t Think So","description":"The European Commission has just adopted a new \u201cadequacy\u201d decision to keep personal data flowing between the EU and the US. The stakes are high: according","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/","og_locale":"en_US","og_type":"article","og_title":"Third Time Lucky for Transatlantic Data Transfer Framework? Max Schrems Doesn\u2019t Think So","og_description":"The European Commission has just adopted a new \u201cadequacy\u201d decision to keep personal data flowing between the EU and the US. The stakes are high: according","og_url":"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/","og_site_name":"PIA","article_publisher":"https:\/\/www.facebook.com\/privateinternetaccess\/","article_published_time":"2023-07-28T14:27:34+00:00","article_modified_time":"2023-08-02T22:18:00+00:00","og_image":[{"width":1488,"height":1052,"url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2023\/07\/transatlantic-liner.png","type":"image\/png"}],"author":"Glyn Moody","twitter_card":"summary_large_image","twitter_creator":"@http:\/\/twitter.com\/glynmoody","twitter_site":"@buyvpnservice","twitter_misc":{"Written by":"Glyn Moody","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/#article","isPartOf":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/"},"author":{"name":"Glyn Moody","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775"},"headline":"Third Time Lucky for Transatlantic Data Transfer Framework? Max Schrems Doesn\u2019t Think So","datePublished":"2023-07-28T14:27:34+00:00","dateModified":"2023-08-02T22:18:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/"},"wordCount":919,"commentCount":0,"publisher":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/#primaryimage"},"thumbnailUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2023\/07\/transatlantic-liner.png","keywords":["adequacy","beuc","cjeu","data privacy framework","data transfers","edpb","european commission","european parliament","gdpr","max schrems","Privacy Shield","Safe Harbor","US"],"articleSection":["General Privacy News","General Thought Leadership","Privacy News Online"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/","url":"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/","name":"Third Time Lucky for Transatlantic Data Transfer Framework? Max Schrems Doesn\u2019t Think So","isPartOf":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/#primaryimage"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/#primaryimage"},"thumbnailUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2023\/07\/transatlantic-liner.png","datePublished":"2023-07-28T14:27:34+00:00","dateModified":"2023-08-02T22:18:00+00:00","description":"The European Commission has just adopted a new \u201cadequacy\u201d decision to keep personal data flowing between the EU and the US. The stakes are high: according","breadcrumb":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/#primaryimage","url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2023\/07\/transatlantic-liner.png","contentUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2023\/07\/transatlantic-liner.png","width":1488,"height":1052},{"@type":"BreadcrumbList","@id":"https:\/\/www.privateinternetaccess.com\/blog\/third-time-lucky-for-transatlantic-data-transfer-framework\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.privateinternetaccess.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Third Time Lucky for Transatlantic Data Transfer Framework? Max Schrems Doesn\u2019t Think So"}]},{"@type":"WebSite","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#website","url":"https:\/\/www.privateinternetaccess.com\/blog\/","name":"PIA","description":"Online privacy news from around the world.","publisher":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.privateinternetaccess.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization","name":"Private Internet Access","url":"https:\/\/www.privateinternetaccess.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png","contentUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png","width":1200,"height":1200,"caption":"Private Internet Access"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/privateinternetaccess\/","https:\/\/x.com\/buyvpnservice","https:\/\/www.instagram.com\/piavpn\/","https:\/\/www.youtube.com\/channel\/UClyJZ47Rizb1xnwuKXDI0_w"]},{"@type":"Person","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775","name":"Glyn Moody","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g","caption":"Glyn Moody"},"description":"Glyn Moody is a freelance journalist who writes and speaks about privacy, surveillance, digital rights, open source, copyright, patents and general policy issues involving digital technology. He started covering the business use of the Internet in 1994, and wrote the first mainstream feature about Linux, which appeared in Wired in August 1997. His book, \"Rebel Code,\" is the first and only detailed history of the rise of open source, while his subsequent work, \"The Digital Code of Life,\" explores bioinformatics - the intersection of computing with genomics.","sameAs":["http:\/\/opendotdotdot.blogspot.com\/","https:\/\/www.linkedin.com\/in\/glynmoody\/","https:\/\/x.com\/http:\/\/twitter.com\/glynmoody"],"url":"https:\/\/www.privateinternetaccess.com\/blog\/author\/glynmoody\/"}]}},"_links":{"self":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/24921","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/comments?post=24921"}],"version-history":[{"count":18,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/24921\/revisions"}],"predecessor-version":[{"id":28813,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/24921\/revisions\/28813"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/media\/24924"}],"wp:attachment":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/media?parent=24921"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/categories?post=24921"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/tags?post=24921"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}