Bonum Certa Men Certa

EPO and Microsoft Collude to Break the Law -- Part VI: A Not-so-safe Harbour

Previous parts:



Safe Harbour
Thanks to the efforts of Max Schrems, the Safe Harbour Agreement was invalidated in October 2015



Summary: Examining the so-called 'Safe Harbour' Agreement, which was neither safe nor a harbour

To ensure that the personal data of European citizens was protected in a manner complaint with EU data protection regulations after it had been transferred to the USA, deals such as the Safe Harbour Agreement and the EU-US Privacy Shield were drafted and implemented to address the shortcomings of nationwide data protection in the USA.



As it turned out, these agreements did not last very long. The Court of Justice of the EU (CJEU) overturned them both because in practice they did not live up to the agreed data protection standards.

These CJEU rulings were a slap in the face for the politicians in the European Parliament who had rubber-stamped the agreements despite warnings from data protection advocates.

The CJEU judgements also gave a clear indication that future agreements of this kind must deliver genuine data protection if they are to be upheld.

"On top of this, there is also the concern and suspicion that commercially lucrative data from the EU can (and will) be tapped on the American side."This effectively creates an impasse because US providers are subject to American legislation such as the PATRIOT Act, the USA FREEDOM Act, and the CLOUD Act, which are designed to ensure that US authorities and intelligence agencies have access to personal data of EU citizens.

On top of this, there is also the concern and suspicion that commercially lucrative data from the EU can (and will) be tapped on the American side.

However, in July 2000, in the context of an examination of the adequacy of the protection of personal data transferred to other countries, the European Commission took the position that the "Safe Harbour" principles developed by the US were in compliance with Article 25 of the EU Data Protection Directive 95/56/EC and would provide "adequate protection" for the transfer of personal information from the EU to the US.

The European Commission thus gave approval for transfers of personal data to the US by means of executive decision no. 2000/520/EC, the so-called "Safe Harbour decision".

However, in 2013 this decision was called into question by the Snowden revelations.

The game was over on 6 October 2015 when the CJEU delivered its judgment in the case of Maximillian Schrems v Data Protection Commissioner.

"...in 2013 this decision was called into question by the Snowden revelations."In this judgment the Court invalidated the European Commission's Safe Harbour Decision, because "legislation permitting the public authorities to have access on a generalised basis to the content of electronic communications must be regarded as compromising the essence of the fundamental right to respect for private life".

Maximillian Schrems
Max Schrems in front of the office of the Irish Data Protection Commissioner in Dublin



This landmark judgment of the CJEU in data protection matters which is colloquially known as "Schrems I" was largely due to the efforts of one individual, the Austrian activist and author Maximilian "Max" Schrems who had initiated a legal action in his capacity as a Facebook user claiming that his Facebook data were insufficiently protected.

In essence Schrems argued that the Safe Harbor system would violate his fundamental right to privacy, data protection and the right to a fair trial under the Charter of Fundamental Rights of the European Union.

The striking down of the Safe Harbour Decision by the CJEU resulted in further talks between the EU Commission and the Obama Administration aimed at establishing "a renewed and sound framework for transatlantic data flows".

The outcome of these talks was a revised framework for regulating transatlantic exchanges of personal data which became known as the EU-US Privacy Shield.

"...the Privacy Shield turned out to be rather porous and it was also struck down by the CJEU in July 2020 in the context of a further legal challenge mounted by Max Schrems."The European Commission approved the Privacy Shield on 12 July 2016 and it entered into effect the same day.

However as we shall see in the next part, the Privacy Shield turned out to be rather porous and it was also struck down by the CJEU in July 2020 in the context of a further legal challenge mounted by Max Schrems.

Recent Techrights' Posts

Linux is Released Too Often, Tested Insufficiently (Same as Chromium, Firefox, and Systemd)
Driven by schedule, not quality (objective criterion)
When I discovered people trafficking in open source software
Reprinted with permission from Daniel Pocock
Over at Tux Machines...
GNU/Linux news for the past day
 
When Lunatics Attack Your Family (Especially Women)
The attacks on my wife and my mom are rather revealing. These are acts of extreme misogyny.
Debian: Let's Pretend We Never Knew Daniel Pocock
Ad hominem is what happens when the message is hard to dispute
DPL Sam Hartman proves blackmail is alive and well in Debian
Reprinted with permission from disguised.work
What is a safe space?
Reprinted with permission from the Free Software Fellowship
Does Debian deserve an independent news service?
Reprinted with permission from disguised.work
Linux.com So Neglected If Not Abandoned That It Promotes Deals That Expired 4 Weeks Ago
Quite some "stewardship" by the Linux Foundation
The Fall of Meritocracy in Tech
nuff said
Microsoft Has Lost Malta
Android has caught up
In Asia, Baidu Has Become Bigger Than Bing and Yandex is Getting There Too
XBox and Bing are going through existential crises
"Having IBM Next to Your Name is a Scarlet Letter"
IBM staff just motivated not to work
Techrights Browsing Made Easier
a draft for discussion
Links 12/05/2024: XBox Founders Say Microsoft Lost Its Identity
Links for the day
Gemini Links 12/05/2024: Enshitification and Mind Maps
Links for the day
Aside From Red Hat Spam and Partisan Media There's a Lingering Rumour of Layoffs
Some rumour said IBM had second thoughts about a WARN notice and delayed that a bit
The Albanian open source community is very healthy indeed
Windows nosedives from 99.1% to a lot less
Web Sites Hijacked by WIPO on Behalf of Microsoft-Sponsored SPI (and People Looking to Hide Embarrassing Facts)
debian.chat; debiancommunity.org; debian.day; debian.family; debian.finance; debian.giving; debiangnulinux.org; debian.guide; debian.news; debian.plus; debianproject.community; debianproject.org; debian.team; debian.video
Julian Assange on Privacy of People, Even Little Children
Facebook/Google (or GAFAM, an acronym I coined with Assange) knows you better than your mom knows you
[Meme] Miscomprehension of GDPR
Social control in general is a ticking timebomb
In Haiti, the Market Share of Windows Collapsed (From 97% to 27% on Desktops/Laptops)
A couple of months ago Windows was measured at 3.04%
In Most Countries It's Still Possible Not to Have a 'Smartphone' and to Pay for Nearly Everything With Cash
Withdrawing money will be possible as long as enough people use many ATMs (cash machines)
Expect Lots of Material From Daniel Pocock as Election Day Nears
The experiences of Daniel Pocock were an excellent example of reprisal or retribution against either whistleblowers or people who give a voice to whistleblowers
I've Been Promoting Free Software for Over 25 Years
I wrote my first computer program when I was about 14, maybe a little younger (I have visual memory of it)
Reminder: Richard Stallman's Talk is This Week in Paris (and in French)
Defending rms isn't the same as defending everything he has ever said
IRC Proceedings: Saturday, May 11, 2024
IRC logs for Saturday, May 11, 2024
Online Bullying (Trying to Make People Unhappy)
Narcissists and bullies behind mice and keyboards, no honesty or fact-checking required
Talk About Software Freedom
"Linux" and "BSD" may mean a lot to more and more people, but they're still just brands or acronyms
Windows in South Korea: From 98.5% in 2010 to About 30% (Android Rises to Almost 50%)
Samsung ships like a million Linux devices per day
Improving Site Navigation for Easier Discovery and Catch-ups
This site is run by code we wrote ourselves
LibrePlanet 2024 Recordings
Let's hope independent recordings by viewers can help recovery of "lost talks" (recordings)
GNU/Linux Reaches 11% Market Share in the United States Of America - an All-Time High
The United States Of America is where the operating system started (Boston) and where Linus Torvalds works (Portland)
[Meme] Being Believed, Not Censored or Defamed
Daniel Pocock, Zini, and John Sullivan (FSF)
Links 11/05/2024: XBox Crisis, Spotify Exodus Continues
Links for the day
Gemini Links 11/05/2024: Why to Delete GitHub
Links for the day
In Europe, Bing Fell Every Month This Year, Lost a Considerable Share Since "Bing Chat" and All the Chatbot Hype
Microsoft's Bing has had many layoffs lately
Links 11/05/2024: Analysis of the Microsoft Crisis and Backdoor-Looking Bugs
Links for the day
Attacking the Messenger?
Stack Overflow and LLM licencing
Microsoft Fired Loads of Staff in Kenya, Which is Another Large Country Where GNU/Linux Has Grown a Lot
Microsoft pays Kenyans only 2 dollars an hour for an IT/office job
Knowing the True History of Debian, Owing to Irish Debian Developer Daniel Pocock (Currently Running to Become Member of the European Parliament)
Irish-Australian and scapegoat of a highly dysfunctional 'Debian family'
Attacking by Credentials
Modest people do not demand fancy titles
Microsoft Windows Used to Have 99% of the OS Market in Jordan, Now It's Just 13% (Less Than iOS)
Based on the data of statCounter, GNU/Linux in Jordan climbed from 0.62% in May 2014 to nearly 5% right now
More Nations Are Reaching and Exceeding 5% Market Share for GNU/Linux, Microsoft Wants to be Bailed Out Again
Microsoft is once again reaching out to Biden for a bailout - a subject we'll cover in a video some time this weekend
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, May 10, 2024
IRC logs for Friday, May 10, 2024
[Meme] What Do You Call a Woman Who Does BDS on Free Software? Elana Hamasman.
Here are some confused thoughts
[Meme] Mission Aborted
Mission Aborted: cancel RMS
Taking Things Up a Notch
we strive/aim towards 15-25 new pages per day, i.e. around 500 per month or 6,000 per year