Safe Harbor 2 deal announced

By Phil Brining

The eagerly awaited Safe Harbor (re-) arrangement between the EU and US was announced late last night with more specific detail to follow.  Safe Harbor is the scheme and mechanism by which EU based data controllers are permitted to transfer and process personal data to/in the USA.

The European Court of Justice (ECJ) ruled Safe Harbor as invalid in October last year effectively making data transfers to the US by EU data controllers unlawful.  Regulators across Europe threatened to take legal action against such data controllers as of February 2016 unless an alternative mechanism was put in place. I’ve been biting my nails all week waiting for the announcement and was relieved that Safe Harbor 2 (SH2) deal has been hammered out.  I look forward to reading more details about it and reviewing how it fits with the Articles in the new General Data Protection Regulation.  The message to take away from this I think is that the initial panic is probably over and transfers relying on Safe Harbor are not now necessarily unlawful.  However, you would be advised to re-evaluate all such transfers to see if SH2 provides the necessary and appropriate levels of protection for your US data transfers.

I’ve not yet found any announcement on the websitesbut here are a couple of links to stories about the announcement – just in case you think I dreamt it!!

Phil Brining

3rd February 2016

Contact Us

Send us a Message

We are always happy to make contact with you by either phone, email or a face to face meeting at our office or yours. We work standard UK office hours – every week day 0830 to 1730.