{"id":6489,"date":"2017-10-09T07:46:36","date_gmt":"2017-10-09T14:46:36","guid":{"rendered":"https:\/\/www.privateinternetaccess.com\/blog\/?p=6489"},"modified":"2021-10-25T21:40:00","modified_gmt":"2021-10-25T21:40:00","slug":"key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections","status":"publish","type":"post","link":"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/","title":{"rendered":"Key transatlantic data flows under threat as US surveillance laws clash once more with EU privacy protections"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">We wrote recently about clouds gathering over the <a href=\"https:\/\/www.privacyshield.gov\/ps\/welcome\">Privacy Shield<\/a> framework that governs transatlantic data flows for thousands of US companies. As that post explained, even if the Privacy Shield is struck down by the EU courts, as some believe it will be, there are alternative mechanisms that can ensure the legality of data transfers out of the EU to the US. The most important of these is the use of <a href=\"https:\/\/www.bakerdatacounsel.com\/blogs\/safe-harbor-is-dead-long-live-standard-contractual-clauses\">standard contractual clauses<\/a> (SCCs), also known as \u201cmodel clauses\u201d. However, last week an Irish judge said she would make a formal request for the Court of Justice of the European Union (CJEU), the EU\u2019s highest court, to rule whether SCCs for this purpose were invalid too. If the CJEU decides they are, that will make sending personal data of EU citizens across the Atlantic hard, or even impossible, for many top Internet companies like Google and Facebook.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Last week\u2019s court decision is another victory for the Austrian privacy activist Max Schrems. He\u2019s been <a href=\"http:\/\/www.europe-v-facebook.org\/prism\/facebook.pdf\">questioning the legality<\/a> of Facebook\u2019s transfer of his personal data from Ireland, where Facebook has its European headquarters, to the US for many years. But a turning point in his campaign was the release by the whistleblower Edward Snowden of hitherto secret documents that showed the NSA had routine access to the personal data of Facebook users under <a href=\"https:\/\/www.theguardian.com\/world\/2013\/jun\/06\/us-tech-giants-nsa-data\">the PRISM program<\/a>. As a result of that revelation, and Schrems\u2019 dogged perseverance through the Irish and EU courts, the CJEU ruled in 2015 that the <a href=\"https:\/\/www.export.gov\/safeharbor\">Safe Harbor<\/a> scheme used by Facebook at that time <a href=\"https:\/\/curia.europa.eu\/jcms\/upload\/docs\/application\/pdf\/2015-10\/cp150117en.pdf\">did not provide sufficient protection<\/a> for EU citizens.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Although the <a href=\"https:\/\/www.privacyshield.gov\/welcome\">Privacy Shield<\/a> framework was hurriedly drawn up to replace Safe Harbor, Facebook decided to turn to SCCs as one of the ways to remain compliant with EU law. Specifically, Facebook Ireland drew up <a href=\"http:\/\/www.europe-v-facebook.org\/comp_fb_scc.pdf\">a contract<\/a> with Facebook Inc. that specified how EU personal data would be transferred and protected.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, in his <a href=\"http:\/\/www.europe-v-facebook.org\/comp_fb_ie.pdf\">revised complaint against Facebook<\/a> made to the Irish Data Protection Commissioner (DPC) in 2015, Schrems pointed out that so far as we knew, Facebook was still part of the PRISM program, and that the SCCs did nothing to change the fact that the NSA could carry out surveillance on EU citizens using Facebook\u2019s databases. On that basis, Schrems called on the DPC to suspend all data flows from Facebook Ireland to Facebook Inc.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The DPC was unwilling to do that, perhaps because of the huge political implications of shutting down data transfers from one of Ireland\u2019s biggest foreign investors. Instead, she took both Facebook Ireland and Schrems to court on the issue. This unusual move was designed to allow the High Court of Ireland to refer the whole issue to the CJEU. This would spare the Irish DPC from taking the responsibility of shutting down Facebook\u2019s dataflows, and would also allow the CJEU to consider the wider issues.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Last week, the Irish High Court judge decided that it would indeed be necessary to refer the matter to the CJEU, and along the way made some significant statements. As well as <a href=\"http:\/\/www.europe-v-facebook.org\/sh2\/HCJ.pdf\">the full 153-page judgment<\/a>, there is a more digestible <a href=\"http:\/\/www.europe-v-facebook.org\/sh2\/ES.pdf\">five-page summary<\/a> from the judge. Schrems too has written <a href=\"http:\/\/www.europe-v-facebook.org\/sh2\/PA.pdf\">a useful explanation<\/a> of what has been decided, and what will happen now.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Irish judge examining the case has no doubt that the NSA is spying on EU citizens using data supplied by Facebook and others:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u201cThe [Data Protection] Directive defines processing of personal data as including any operation or set of operations which is performed upon personal data such as collection\u2026 or otherwise making available the data. On the basis of this definition and the evidence in relation to the operation of the PRISM and <a href=\"https:\/\/www.justsecurity.org\/33044\/unprecedented-unlawful-nsas-upstream-surveillance\/\">Upstream<\/a> programmes authorised under s.702 of FISA [the <a href=\"https:\/\/bja.ojp.gov\/program\/it\/privacy-civil-liberties\/authorities\/statutes\/1286\">US Foreign Intelligence Surveillance Act of 1978<\/a>], it is clear that there is mass indiscriminate processing of data by the Unites States government agencies, whether this is described as mass or targeted surveillance.\u201d<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">Moreover, the judge found that the supposed remedies offered by the US to any EU citizen that felt they had suffered as a result of that surveillance were insufficient:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u201cIn my opinion, despite the number of possible causes of action, it cannot be said that US law provides the right of every person to a judicial remedy for any breach of his data privacy by its intelligence agencies. On the contrary, the individual remedies are few and far between and certainly not complete or comprehensive.\u201d<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">In addition, the judge agreed that the Irish DPC had \u201cwell-founded concerns\u201d about the validity of the SCC mechanism, which required the CJEU\u2019s definitive views. As Schrems points out, it takes around one and half years after referral for cases to be considered, so there won\u2019t be any immediate consequences of the Irish court\u2019s judgment. However, a ruling against Facebook\u2019s use of SCCs by the CJEU is likely to be based on the NSA\u2019s continued surveillance of EU citizens\u2019 personal data. If that\u2019s the case, it would apply equally to similar transfers made under the Safe Harbor framework. Taken together, that would make it hard, and maybe impossible, for companies like Facebook and Google to send EU data to the US. The obvious solution would be to use servers located in the EU to hold and process data relating to EU citizens.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As Schrems points out, a CJEU ruling against Facebook\u2019s SCCs would not apply to every US company sending data across the Atlantic:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u201cNot all EU-US data flows are under challenge. The situation is specifically problematic regarding US companies that are \u2018electronic communication service providers\u2019, because the relevant law (FISA 702) only applies to them. Most \u2018normal\u2019 businesses (like trade in goods and services and alike) do not fall under such US surveillance laws and there is therefore no direct conflict with EU laws. The problem is however similar for most other large US technology providers that provide IT outsourcing services (e.g. \u201ccloud services\u201d) to the EU.\u201d<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">That\u2019s an important point. It means that transatlantic data flows in general are not at risk, even if they certainly are for many of the top names in the online world.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Featured image by <a href=\"https:\/\/pixabay.com\/en\/agree-english-consent-contract-1728448\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Catkin<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>We wrote recently about clouds gathering over the Privacy Shield framework that governs transatlantic data flows for thousands of US companies. As that post explained, even if the Privacy Shield is struck down by the EU courts, as some believe it will be, there are alternative mechanisms that can ensure the legality of data transfers &hellip; <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Key transatlantic data flows under threat as US surveillance laws clash once more with EU privacy protections&#8221;<\/span><\/a><\/p>\n","protected":false},"author":20,"featured_media":6493,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_stopmodifiedupdate":true,"_modified_date":"","footnotes":""},"categories":[1,130,1941],"tags":[104,159,681,127,612,611],"class_list":["post-6489","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-governments","category-surveillance","tag-facebook","tag-gchq","tag-max-schrems","tag-nsa","tag-privacy-shield","tag-safe-harbor"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.9 (Yoast SEO v26.9) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Key transatlantic data flows under threat as US surveillance laws clash once more with EU privacy protections<\/title>\n<meta name=\"description\" content=\"We wrote recently about clouds gathering over the Privacy Shield framework that governs transatlantic data flows for thousands of US companies. As that\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Key transatlantic data flows under threat as US surveillance laws clash once more with EU privacy protections\" \/>\n<meta property=\"og:description\" content=\"We wrote recently about clouds gathering over the Privacy Shield framework that governs transatlantic data flows for thousands of US companies. As that\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/\" \/>\n<meta property=\"og:site_name\" content=\"PIA\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/privateinternetaccess\/\" \/>\n<meta property=\"article:published_time\" content=\"2017-10-09T14:46:36+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-10-25T21:40:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2017\/10\/pexels-photo-210585.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"3072\" \/>\n\t<meta property=\"og:image:height\" content=\"2048\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Glyn Moody\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@http:\/\/twitter.com\/glynmoody\" \/>\n<meta name=\"twitter:site\" content=\"@buyvpnservice\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Glyn Moody\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/\"},\"author\":{\"name\":\"Glyn Moody\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775\"},\"headline\":\"Key transatlantic data flows under threat as US surveillance laws clash once more with EU privacy protections\",\"datePublished\":\"2017-10-09T14:46:36+00:00\",\"dateModified\":\"2021-10-25T21:40:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/\"},\"wordCount\":1037,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2017\/10\/pexels-photo-210585.jpeg\",\"keywords\":[\"Facebook\",\"gchq\",\"max schrems\",\"nsa\",\"Privacy Shield\",\"Safe Harbor\"],\"articleSection\":[\"General Privacy News\",\"Governments\",\"Surveillance\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/\",\"name\":\"Key transatlantic data flows under threat as US surveillance laws clash once more with EU privacy protections\",\"isPartOf\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2017\/10\/pexels-photo-210585.jpeg\",\"datePublished\":\"2017-10-09T14:46:36+00:00\",\"dateModified\":\"2021-10-25T21:40:00+00:00\",\"description\":\"We wrote recently about clouds gathering over the Privacy Shield framework that governs transatlantic data flows for thousands of US companies. As that\",\"breadcrumb\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/#primaryimage\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2017\/10\/pexels-photo-210585.jpeg\",\"contentUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2017\/10\/pexels-photo-210585.jpeg\",\"width\":3072,\"height\":2048},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.privateinternetaccess.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Key transatlantic data flows under threat as US surveillance laws clash once more with EU privacy protections\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#website\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/\",\"name\":\"PIA\",\"description\":\"Online privacy news from around the world.\",\"publisher\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.privateinternetaccess.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\",\"name\":\"Private Internet Access\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png\",\"contentUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png\",\"width\":1200,\"height\":1200,\"caption\":\"Private Internet Access\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/privateinternetaccess\/\",\"https:\/\/x.com\/buyvpnservice\",\"https:\/\/www.instagram.com\/piavpn\/\",\"https:\/\/www.youtube.com\/channel\/UClyJZ47Rizb1xnwuKXDI0_w\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775\",\"name\":\"Glyn Moody\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g\",\"caption\":\"Glyn Moody\"},\"description\":\"Glyn Moody is a freelance journalist who writes and speaks about privacy, surveillance, digital rights, open source, copyright, patents and general policy issues involving digital technology. He started covering the business use of the Internet in 1994, and wrote the first mainstream feature about Linux, which appeared in Wired in August 1997. His book, \\\"Rebel Code,\\\" is the first and only detailed history of the rise of open source, while his subsequent work, \\\"The Digital Code of Life,\\\" explores bioinformatics - the intersection of computing with genomics.\",\"sameAs\":[\"http:\/\/opendotdotdot.blogspot.com\/\",\"https:\/\/www.linkedin.com\/in\/glynmoody\/\",\"https:\/\/x.com\/http:\/\/twitter.com\/glynmoody\"],\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/author\/glynmoody\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Key transatlantic data flows under threat as US surveillance laws clash once more with EU privacy protections","description":"We wrote recently about clouds gathering over the Privacy Shield framework that governs transatlantic data flows for thousands of US companies. As that","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/","og_locale":"en_US","og_type":"article","og_title":"Key transatlantic data flows under threat as US surveillance laws clash once more with EU privacy protections","og_description":"We wrote recently about clouds gathering over the Privacy Shield framework that governs transatlantic data flows for thousands of US companies. As that","og_url":"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/","og_site_name":"PIA","article_publisher":"https:\/\/www.facebook.com\/privateinternetaccess\/","article_published_time":"2017-10-09T14:46:36+00:00","article_modified_time":"2021-10-25T21:40:00+00:00","og_image":[{"width":3072,"height":2048,"url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2017\/10\/pexels-photo-210585.jpeg","type":"image\/jpeg"}],"author":"Glyn Moody","twitter_card":"summary_large_image","twitter_creator":"@http:\/\/twitter.com\/glynmoody","twitter_site":"@buyvpnservice","twitter_misc":{"Written by":"Glyn Moody","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/#article","isPartOf":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/"},"author":{"name":"Glyn Moody","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775"},"headline":"Key transatlantic data flows under threat as US surveillance laws clash once more with EU privacy protections","datePublished":"2017-10-09T14:46:36+00:00","dateModified":"2021-10-25T21:40:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/"},"wordCount":1037,"commentCount":0,"publisher":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/#primaryimage"},"thumbnailUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2017\/10\/pexels-photo-210585.jpeg","keywords":["Facebook","gchq","max schrems","nsa","Privacy Shield","Safe Harbor"],"articleSection":["General Privacy News","Governments","Surveillance"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/","url":"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/","name":"Key transatlantic data flows under threat as US surveillance laws clash once more with EU privacy protections","isPartOf":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/#primaryimage"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/#primaryimage"},"thumbnailUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2017\/10\/pexels-photo-210585.jpeg","datePublished":"2017-10-09T14:46:36+00:00","dateModified":"2021-10-25T21:40:00+00:00","description":"We wrote recently about clouds gathering over the Privacy Shield framework that governs transatlantic data flows for thousands of US companies. As that","breadcrumb":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/#primaryimage","url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2017\/10\/pexels-photo-210585.jpeg","contentUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2017\/10\/pexels-photo-210585.jpeg","width":3072,"height":2048},{"@type":"BreadcrumbList","@id":"https:\/\/www.privateinternetaccess.com\/blog\/key-transatlantic-data-flows-threat-us-surveillance-laws-clash-eu-privacy-protections\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.privateinternetaccess.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Key transatlantic data flows under threat as US surveillance laws clash once more with EU privacy protections"}]},{"@type":"WebSite","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#website","url":"https:\/\/www.privateinternetaccess.com\/blog\/","name":"PIA","description":"Online privacy news from around the world.","publisher":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.privateinternetaccess.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization","name":"Private Internet Access","url":"https:\/\/www.privateinternetaccess.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png","contentUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png","width":1200,"height":1200,"caption":"Private Internet Access"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/privateinternetaccess\/","https:\/\/x.com\/buyvpnservice","https:\/\/www.instagram.com\/piavpn\/","https:\/\/www.youtube.com\/channel\/UClyJZ47Rizb1xnwuKXDI0_w"]},{"@type":"Person","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775","name":"Glyn Moody","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g","caption":"Glyn Moody"},"description":"Glyn Moody is a freelance journalist who writes and speaks about privacy, surveillance, digital rights, open source, copyright, patents and general policy issues involving digital technology. He started covering the business use of the Internet in 1994, and wrote the first mainstream feature about Linux, which appeared in Wired in August 1997. His book, \"Rebel Code,\" is the first and only detailed history of the rise of open source, while his subsequent work, \"The Digital Code of Life,\" explores bioinformatics - the intersection of computing with genomics.","sameAs":["http:\/\/opendotdotdot.blogspot.com\/","https:\/\/www.linkedin.com\/in\/glynmoody\/","https:\/\/x.com\/http:\/\/twitter.com\/glynmoody"],"url":"https:\/\/www.privateinternetaccess.com\/blog\/author\/glynmoody\/"}]}},"_links":{"self":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/6489","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/comments?post=6489"}],"version-history":[{"count":16,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/6489\/revisions"}],"predecessor-version":[{"id":29381,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/6489\/revisions\/29381"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/media\/6493"}],"wp:attachment":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/media?parent=6489"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/categories?post=6489"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/tags?post=6489"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}