{"RichTextAreas":[{"Title":"","Overview":"","OverviewExpanded":"

The Article 29 Working Party, which includes representatives from all EU Data Protection Authorities, released its much-awaited guidance on the judgment by the European Court of Justice declaring the European Commission’s decision on the Safe Harbor to be invalid. Described as “a collective and common position on the judgment,” the “first consequences to be drawn at European and national level” are as follows:

Transfers to the United States in reliance on the Safe Harbor after the October 6, 2015 decision are unlawful. However, the Working Party showed deference to the principle of proportionality by announcing that coordinated enforcement actions by data protection authorities against companies failing to implement appropriate data transfer solutions will not start until the end of January 2016.
Model Contracts and Binding Corporate Rules are still effective data transfer solutions, although the Working Party will continue its analysis of the impact of the Court ruling on these transfer tools.
A Safe Harbor version 2.0 is “urgently needed” providing this includes “obligations on the necessary oversight of access by public authorities, on transparency, on proportionality, on redress mechanisms and on data protection rights.”
It is clear that the Working Party considers time to be of the essence, both in terms of reaching an intergovernmental agreement on transatlantic data flows with a new Safe Harbor version 2.0 and for companies to assess their international transfers and implement appropriate legal and technical solutions. The short grace period puts pressure on the Safe Harbor negotiations and spurs companies to put alternative plans in place.

Sidley’s global team of privacy professionals has been monitoring these developments closely and has been actively engaged in advocacy, analysis and development of practical responses to these issues.

***********************

For more information and continuous updates, please visit our Data Matters. On October 20, 2015, Sidley Austin LLP will be holding a webinar with the European Data Protection Supervisor to discuss these issues, entitled “Safe Harbor Briefing: Your Questions Answered by Giovanni Buttarelli” at 16.30 BST, 11.30 EST and 8.30 PST. Register for the webinar here.

If you have any questions regarding this Sidley Update, please contact the Sidley lawyer with whom you usually work, or
\n
\n

\n\n \n \n \n \n \n \n \n \n

William RM Long

Partner

wlong@sidley.com
\n

+44 20 7360 2061

Maarten Meulenbelt

Partner

mmeulenbelt@sidley.com\n

+32 2 504 6467

Alan Charles Raul

Partner

araul@sidley.com
\n

+1 202 736 8477

Sidley Privacy, Data Security & Information Law Practice

To receive Sidley Updates, please subscribe at www.sidley.com/subscribe.

Sidley Austin provides this information as a service to clients and other friends for educational purposes only. It should not be construed or relied on as legal advice or to create a lawyer-client relationship.

Attorney Advertising - For purposes of compliance with New York State Bar rules, our headquarters are Sidley Austin LLP, 787 Seventh Avenue, New York, NY 10019, 212.839.5300; One South Dearborn, Chicago, IL 60603, 312.853.7000; and 1501 K Street, N.W., Washington, D.C. 20005, 202.736.8000.

","OverviewReadMoreLabel":"More","OverviewViewLessLabel":"Less"}],"CssClass":"","FolderTemplateID":null,"SiteImproveReadMoreDataAttributes":""}

EU Data Protection Authorities Give Companies Three Months to Assess New International Data Transfer Solutions and Call “Urgently” for Safe Harbor 2.0 – Model Contracts and Binding Corporate Rules Remain Viable