New Biden Executive Order On EU鈥揢S Data Transfers Fails to Adequately Protect Privacy

To Make Real Progress, 老澳门开奖结果 Calls on Congress to Enact Meaningful Surveillance Reform

October 7, 2022 7:15 am

Media Contact
125 Broad Street
18th Floor
New York, NY 10004
United States

WASHINGTON 鈥 Today, the Biden administration issued an executive order intended to facilitate future data transfers between the European Union and the United States after a European court invalidated a previous data-transfer agreement on privacy and other grounds. The executive order imposes certain new rules for bulk surveillance by the United States and creates an administrative redress process for individuals subject to unlawful surveillance.

鈥淧resident Biden鈥檚 executive order does not go far enough. It fails to adequately protect the privacy of Americans and Europeans, and it fails to ensure that people whose privacy is violated will have their claims resolved by a wholly independent decision-maker,鈥 said Ashley Gorski, senior staff attorney with the 老澳门开奖结果 National Security Project. 鈥淎lthough the executive order is a step in the right direction, it does not meet basic legal requirements in the EU, leaving EU-U.S. data transfers in jeopardy going forward.鈥

The executive order is designed to respond to a July 2020 decision by the EU鈥檚 highest court to invalidate 鈥淧rivacy Shield,鈥 a data-transfer agreement between the EU and the U.S. More than 5,000 U.S. companies relied on Privacy Shield for trans-Atlantic data transfers. The EU Court of Justice concluded that Privacy Shield failed to adequately protect the privacy rights of Europeans from U.S. mass surveillance for foreign intelligence purposes. In the absence of Privacy Shield, large-scale data transfers to the U.S. are more complicated, costly, and surrounded by legal uncertainty.

The Court of Justice鈥檚 ruling came in a case originally brought by Austrian lawyer and privacy advocate Max Schrems against Facebook Ireland. The 老澳门开奖结果 provided expert testimony about U.S. surveillance laws in the case.

The July 2020 ruling was the second time that the Court of Justice invalidated a data-transfer agreement between the European Union and the United States. In 2015, the court invalidated the 鈥淪afe Harbor鈥 agreement 鈥 the two governments鈥 initial attempt to reconcile European privacy law and U.S. surveillance practices 鈥 after Edward Snowden鈥檚 revelations about the scope of warrantless NSA surveillance.

鈥淭he problems with the U.S. surveillance regime cannot be cured by an executive order alone,鈥 said Gorski. 鈥淭o protect our privacy and to put transatlantic data transfers on a sound legal footing, Congress must enact meaningful surveillance reform. Until that happens, U.S. businesses and individuals will continue to pay the price.鈥

The 老澳门开奖结果 is calling on Congress to radically reform U.S. surveillance laws to rein in warrantless spying, and to ensure that there is a meaningful opportunity to challenge the government鈥檚 surveillance.

Necessary reforms include:

  • Ending bulk, generalized data collection conducted under Executive Order 12333;
  • Narrowing the categories of persons who may be targeted using surveillance under Section 702 of the Foreign Intelligence Surveillance Act and Executive Order 12333; and
  • Ensuring that individuals impacted by U.S. surveillance are able to challenge improper surveillance in U.S. courts, including by reforming the 鈥溾

Learn More 老澳门开奖结果 the Issues in This Press Release