European Union Says Privacy Shield is Working

The European Union has given a thumbs up to the EU-US Privacy Shield in its first annual review of the framework for protecting cross-border data flows. The first annual report concluded the shield works, but could use some bolstering, including by the U.S. Department of Commerce.

"Overall the report shows that the Privacy Shield continues to ensure an adequate level of protection for the personal data transferred from the EU to participating companies in the U.S. The U.S. authorities have put in place the necessary structures and procedures to ensure the correct functioning of the Privacy Shield, such as new redress possibilities for EU individuals," the report concluded. "Complaint-handling and enforcement procedures have been set up, and cooperation with the European Data protection authorities has been stepped up," it said. "The certification process is functioning well - over 2,400 companies have now been certified by the U.S. Department of Commerce. As regards access to personal data by U.S. public authorities for national security purposes, relevant safeguards on the U.S. side remain in place."