EU Parliament approves new bill to ensure the USA protects EU citizens data by EU Laws

[Master Disaster]

The EU threw out a previous US bill called Safe Harbour in October 2015 and today have agreed on a new bill called Privacy Shield which is designed to ensure US companies protect the data of European citizens to the same extent as EU law requires. The new bill/act is expected to be adopted into EU law as early as next week. 

Quote

The Privacy Shield agreement replaces the previous accord, called Safe Harbour, that was struck down in October 2015.

 

Safe Harbour let US companies self-certify that they were doing enough to protect data about Europeans.

The European Court of Justice threw out Safe Harbour after leaks showed data was being spied upon.

 

Member states of the European Commission have given "strong support" to the Privacy Shield said the EC's Justice Commissioner Vera Jourova in a statement.

 

Ms Jourova said the approval paved the way for the formal adoption of the agreement early next week.

 

"The EU-US Privacy Shield will ensure a high level of protection for individuals and legal certainty for business," said Commissioner Jourova. "It is fundamentally different from the old Safe Harbour."

 

The adoption of the Privacy Shield ends months of uncertainty for many tech companies such as Google and Facebook after the European court found the Safe Harbour agreement wanting.

 

The agreement covers everything from personal information about employees to the detailed records of what people do online, which is often used to aid targeted advertising.

EU officials decided that allowing US companies to generate their own reports into how EU data is used by them wasn't good enough. 

Quote

The Safe Harbour pact let US companies skirt tough European rules that govern how this data can be treated, by letting them generate their own reports about the steps they took to stop it being misused.

 

Revelations about the US National Security Agency's widespread surveillance using data which was supposedly protected by Safe Harbour, led to it being struck down.

 

The Privacy Shield put in place "clear limitations, safeguards and oversight mechanisms" for how data should be protected in the future, said Commissioner Jourova.

 

The Privacy Shield pact states that data stored in the US about EU citizens must be given "equivalent" protection by law to what it would receive if stored in the EU.

http://www.bbc.co.uk/news/technology-36744928

 

I'm wondering how exactly they're expecting to enforce this ruling? EU legislation can only be applied to companies that operate within the EU so for the Facebooks, Googles, Microsofts etc then fine but what's to stop them selling EU data to other companies that don't operate in the EU who are free to use it however they choose? 

 

Edit

 

After reading the article a second time I noticed a few things, it uses terms like pact and agreement which implies the US were involved in the discussions and have agreed to enforce the ruling in America, correct? 

[MrSuperb]

6 minutes ago, Master Disaster said:

 but what's to stop them selling EU data to other companies that don't operate in the EU who are free to use it however they choose? 

EU laws 

[Master Disaster]

2 minutes ago, MrSuperb said:

EU laws 

After reading the article a second time I noticed a few things, it uses terms like pact and agreement which implies the US were involved in the discussions and have agreed to enforce the ruling in America, correct? 

[thekeemo]

The EU

Doing things right

[Master Disaster]

2 minutes ago, thekeemo said:

The EU

Doing things right

Snowdens legacy continues to have a positive effect. 

[EzioAuditore]

ye cause the NSA would care about that...as a german i cant trust the USA

[suicidalfranco]

2 hours ago, EzioAuditore said:

ye cause the NSA would care about that...as a german i cant trust the USA

as an earthling i cant trust the USA

[SansVarnic]

Not to be pessimistic here but, Good luck on the enforcement...

 

[straight_stewie]

On 7/9/2016 at 3:36 AM, Master Disaster said:

The EU threw out a previous US bill called Safe Harbour in October 2015 and today have agreed on a new bill called Privacy Shield which is designed to ensure US companies protect the data of European citizens to the same extent as EU law requires. The new bill/act is expected to be adopted into EU law as early as next week. 

Interesting that this comes immediately after the UK (a founding member of FiveEyes) votes to leave the EU.

[AresKrieger]

On 7/9/2016 at 4:53 AM, EzioAuditore said:

ye cause the NSA would care about that...as a german i cant trust the USA

The NSA only looks at internal data, you guys have to deal with the CIA if anyone

[straight_stewie]

13 minutes ago, AresKrieger said:

The NSA only looks at internal data, you guys have to deal with the CIA if anyone

No they don't. Thanks to the great Edward we now know that the NSA is the leader of a group called Five Eyes that collects and monitors citizens communications in many countries. In fact, FVEY runs a few programs that are really just shared databases of communications, namely:

• Prism
• XKeyScore
• Tempora
• Muscular
• And especially STATEROOM

[NoobsWeStand]

On 7/9/2016 at 3:53 AM, EzioAuditore said:

ye cause the NSA would care about that...as a german i cant trust the USA

as an american I can't trust the USA

[AresKrieger]

22 minutes ago, straight_stewie said:

No they don't. Thanks to the great Edward we now know that the NSA is the leader of a group called Five Eyes that collects and monitors citizens communications in many countries. In fact, FVEY runs a few programs that are really just shared databases of communications, namely:

• Prism
• XKeyScore
• Tempora
• Muscular
• And especially STATEROOM

Huh I though that only involved the UK, NZ, Canada and Australia but based on this:

Quote

In early 2014, the European Parliament's Committee on Civil Liberties, Justice and Home Affairs released a draft report which confirmed that the intelligence agencies of New Zealand and Canada have cooperated with the NSA under the Five Eyes programme and may have been actively sharing the personal data ofEU citizens.

I guess I was wrong

[Misanthrope]

On 7/9/2016 at 3:50 AM, thekeemo said:

The EU

Doing things right

Because you agree with the end result of the law. But if you look at the method, it's the EU trying to dictate laws to the US, a country that's not even a motherfucking member of their stupid union.

 

This, and not racism, is why Brexit happened.

[Rune]

Lol. I admire the goal, but good luck getting there.

[Fetzie]

3 hours ago, Misanthrope said:

Because you agree with the end result of the law. But if you look at the method, it's the EU trying to dictate laws to the US, a country that's not even a motherfucking member of their stupid union.

 

This, and not racism, is why Brexit happened.

No, it is the EU enforcing laws on companies which operate within the territories which make up the European Union.

[straight_stewie]

3 hours ago, Misanthrope said:

But if you look at the method, it's the EU trying to dictate laws to the US, a country that's not even a motherfucking member of their stupid union.

I have to disagree with this. The law doesn't directly concern the United States (the actual state, lol) in any way. It simply says that it's illegal for businesses to support data collection within the boundaries of the EU. That's a really backwards way to tell FVEY to GTFO but that's really what they are doing. Atleast they aren't doing what the US is doing, which is writing laws that require businesses to support bulk data collection.

[Notional]

5 hours ago, Fetzie said:

No, it is the EU enforcing laws on companies which operate within the territories which make up the European Union.

Løl no, it's a law that dictates, that US law does not have jurisdiction in the EU, like some brain dead american judges/politicians seems to think. Read up on the Microsoft Ireland case before spouting such nonsense.

[KuJoe]

Is this like the law passed last year where companies not in the EU have to pay VAT if they sell to people in the EU? Was that one ever enforced?

[That Norwegian Guy]

On Saturday, July 09, 2016 at 10:53 AM, EzioAuditore said:

ye cause the NSA would care about that...as a german i cant trust the USA

As a Norwegian (first world of the first world) who chooses to use a Russian e-mail service and a Chinese web browser, I couldn't agree more. I trust my data more with them than USA.

[BuckGup]

23 hours ago, SansVarnic said:

Not to be pessimistic here but, Good luck on the enforcement...

 

Agreed. Pirating gets you a $250,000 fine and years in prison. Look how many people do it. 

[straight_stewie]

5 minutes ago, SamStrecker said:

Pirating gets you a $250,000 fine and years in prison.

Per instance. If someone where to pirate the entire Simpsons tv series, for example, that would net them a maximum of $149,000,000 in fines or 5,960 years in prison or both. (Atleast in the US)

Most likely you wouldn't get that much. A few years in jail, never being able to touch a computer again in your life, and it'd be over. But they could give you that much.

[BuckGup]

14 minutes ago, straight_stewie said:

Per instance. If someone where to pirate the entire Simpsons tv series, for example, that would net them a maximum of $149,000,000 in fines or 5,960 years in prison or both. (Atleast in the US)

Most likely you wouldn't get that much. A few years in jail, never being able to touch a computer again in your life, and it'd be over. But they could give you that much.

The best part is ISPs know you pirate and just say hey don't do that. Then they shut your internet off and you say turn it back on and they say ok

[Okjoek]

I don't blame EU citizens for not trusting our corporatocracy. It's always felt like we (the US) use our weight to push others down to prop ourselves (or our corporations) up.