Safesprings White Papers on Empowering European Innovation

Where things stand after the EU-US Data Protection Framework (DPF)

Wed, 13 Mar 2024 00:00:00 +0000

The European Commission’s latest decision on data transfers to the United States has once again drawn attention to the legal and technical challenges faced by European organizations.

In two earlier white papers, from 2018¹ and 2020², Safespring reviewed the legal and technical landscape for organizations planning their IT infrastructure.

In light of the European Commission’s most recent decision on data transfers to U.S. cloud providers in July 2023³, there is reason to once again review the changed circumstances.

Annulment of Privacy Shield by the European Court of Justice

Fri, 04 Sep 2020 00:00:00 +0000

Background

In the spring of 2018, Safespring published a white paper on the consequences of the European General Data Protection Regulation (GDPR)1 and the American CLOUD Act on cloud procurement.

Safespring’s white paper concluded with eleven recommendations for organizations working with cloud infrastructure for data protection, data security, and jurisdiction issues. In a ruling made on 16 July 2020, the European Court of Justice further specified the conditions for the transfer of the data of European individuals to US jurisdiction. This has called for Safespring to update its earlier recommendations.

How to handle the uncertainty in light of the GDPR and the CLOUD Act

Tue, 09 Jul 2019 00:00:00 +0000

This white paper concerns the provisions of EU and U.S. law governing cross-border data transfers and current court cases that may affect them.

The General Data Protection Regulation (GDPR) entered into force on 25 May 2018, replacing the Personal Data Act (PUL). It is neither the beginning nor the end of the EU’s long-standing efforts to improve the protection of individuals’ data and their right to privacy. These rights are fundamental human rights in the EU, and all Member States have been bound by them in areas within the EU’s competence since the Lisbon Treaty took effect in 20091. The EU thereby strengthens its lead over the United States when it comes to legal protections for individuals’ rights to privacy and data.