PrivacyPod #20: Hot Takes on Privacy Shield 2.0

We have a new data transfer deal between the EU and the US! In principle. What does the announcement of an agreement “in principle” mean, when can we expect an actual deal, and what does this mean for transfers of personal data to the US right now? Can we stop doing transfer impact assessments altogether?

In other news, we cover Meta’s 17MEUR fine from Ireland, and have a quick look at the recent EDPB guidelines. We’re delighted to discover that the term “Privacy Zuckering” exists, and equally disappointed to find out that the term did not make its way in the EDPB’s dark patterns guideline.

European Commission press release on the Framework
https://ec.europa.eu/commission/presscorner/api/files/attachment/872132/Trans-Atlantic%20Data%20Privacy%20Framework.pdf.pdf

US Fact Sheet on the Framework
https://www.whitehouse.gov/briefing-room/statements-releases/2022/03/25/fact-sheet-united-states-and-european-commission-announce-trans-atlantic-data-privacy-framework/

CMS blogpost on Privacy Shield
https://www.cmshs-bloggt.de/tmc/datenschutzrecht/trans-atlantic-data-privacy-framework-datentransfer-usa/#

US Supreme Court Fazaga case
https://thehill.com/opinion/judiciary/598899-the-supreme-court-just-made-a-us-eu-privacy-shield-agreement-even-harder

17MEUR fine on Meta from Irish DPA
https://www.dataprotection.ie/en/news-media/press-releases/data-protection-commission-announces-decision-meta-facebook-inquiry

New guidelines from the EDPB
https://edpb.europa.eu/system/files/2022-03/guidelines_202202_on_the_application_of_article_60_gdpr_en.pdf
https://edpb.europa.eu/system/files/2022-03/edpb_03-2022_guidelines_on_dark_patterns_in_social_media_platform_interfaces_en.pdf

We’d love to get feedback – so please tag us, follow us, DM us… or send us traditional email:

Twitter: https://twitter.com/PodPrivacy, #privacypod

Instagram: @privacypod

LinkedIn: https://www.linkedin.com/company/tietosuojapod/about/

Email: tietosuojapod@protonmail.com