EU–US Privacy Shield

E221479

The EU–US Privacy Shield was a transatlantic data transfer framework that governed how companies could legally move personal data from the European Union to the United States while aiming to ensure adequate privacy protections.

All labels observed (4)

How this entity was disambiguated

Statements (48)

Predicate Object
instanceOf EU–US data protection arrangement ⓘ
data transfer framework ⓘ
international agreement ⓘ
aimedToEnsure adequate level of protection for personal data transferred from the EU to the US ⓘ
appliesTo commercial organizations ⓘ
personal data of EU residents ⓘ
enteredIntoForceIn 2016 ⓘ
governed transfer of HR data from EU to US for participating companies ⓘ
hasJurisdiction European Union ⓘ
United States ⓘ
includedMechanism enforcement by US authorities ⓘ
ombudsperson mechanism for national security complaints ⓘ
redress mechanisms for EU data subjects ⓘ
self-certification by US companies ⓘ
includedPrinciple access ⓘ
accountability for onward transfer ⓘ
choice ⓘ
data integrity and purpose limitation ⓘ
notice ⓘ
recourse, enforcement and liability ⓘ
security ⓘ
legalBasis Article 25 of Directive 95/46/EC ⓘ
EU data protection law ⓘ
providedFor annual joint review by EU and US authorities ⓘ
regulates transatlantic personal data transfers ⓘ
relatedTo EU adequacy decisions ⓘ
General Data Protection Regulation ⓘ
linked to: GDPR
replaced Safe Harbor Privacy Principles ⓘ
requiredComplianceWith Privacy Shield Principles ⓘ
sectoralEnforcementBy US Department of Transportation ⓘ
US Federal Trade Commission ⓘ
successorFramework EU–US Data Privacy Framework ⓘ
wasAdministeredBy United States Department of Commerce ⓘ
wasAdoptedBy European Commission ⓘ
wasAdoptedOn 2016-07-12 ⓘ
wasAnnouncedBy European Commission ⓘ
United States government ⓘ
wasChallengedBy Maximilian Schrems ⓘ
wasCriticizedBy civil society organizations ⓘ
privacy advocates ⓘ
wasInvalidatedBecauseOf concerns about US surveillance laws ⓘ
insufficient judicial redress for EU data subjects in the US ⓘ
wasInvalidatedBy Court of Justice of the European Union ⓘ
wasInvalidatedInCase Data Protection Commissioner v Facebook Ireland and Maximillian Schrems ⓘ
Schrems II ⓘ
wasInvalidatedOn 2020-07-16 ⓘ
wasNegotiatedBy European Commission ⓘ
United States Department of Commerce ⓘ

How these facts were elicited

Referenced by (10)

Full triples — surface form annotated when it differs from this entity's canonical label.

EU–US Privacy Shield → replaced → Safe Harbor Privacy Principles ⓘ
linked to: EU–US Privacy Shield
EU–US Privacy Shield → requiredComplianceWith → Privacy Shield Principles ⓘ
linked to: EU–US Privacy Shield
EU–US Data Privacy Framework → follows → EU–US Privacy Shield ⓘ
EU–US Data Privacy Framework → replaces → EU–US Privacy Shield ⓘ
EU–US Data Privacy Framework → relatedTo → EU–US Privacy Shield ⓘ
EU–US Data Privacy Framework → relatedTo → Safe Harbor Privacy Principles ⓘ
linked to: EU–US Privacy Shield
EU–US Data Privacy Framework → relatedTo → Schrems I judgment ⓘ
linked to: EU–US Privacy Shield