Bloomberg BNA is reporting that the EU hopes to reach a Safe Harbor deal with the U.S. on Monday, February 1, 2016.  Speaking at the Computers, Privacy and Data Protection Conference in Brussels, Paul F. Nemitz, Director for Fundamental Rights and Union Citizenship at the Directorate-General Justice of the European Commission said, “[w]e hope to be able to reach an [acceptable] arrangement.”   Mr. Nemitz is considered one of the top European Commission officials negotiating with the U.S. on reaching a successor treaty to the U.S.-EU Safe Harbor data transfer program.

As previously reported, on October 6, 2015, the Court of Justice of the European Union overturned the Safe Harbor program when it ruled in Schrems v. Data Protection Commissioner  that the voluntary Safe Harbor Program did not provide adequate protection to the personal data of EU citizens. Post Schrems U.S. companies have been unclear what to do to transfer data out of the EU in a compliant manner.

Mr. Nemitz said the European Commissioner for Justice, Consumers and Gender Equality Justice, Vera Jourova, will go to parliament Monday evening to “inform member states then of the outcome” of talks to reach a resolution on a possible replacement for the Safe Harbor.  A January 31, 2016 deadline has been set by the Article 29 Working Party of data protection officials from the 28 EU member states.  The hope for agreement by February 1, 2016 is pertinent as the Art. 29 Party is scheduled to meet February 2, 2016 to discuss this issue.

Interestingly, U.S. Federal Trade Commissioner Julie Brill also appeared with Mr. Nemitz at the conference.  While Ms. Brill confirmed “[t]here’s absolutely a path to agreement,” she was less committal as to a potential Monday resolution saying, “[w]e need to get there. We can’t allow this to continue to be a stumbling block. But I don’t have a crystal ball.”

We will continue to monitor this situation and provide updates as we obtain them.

Print:
Email this postTweet this postLike this postShare this post on LinkedIn
Photo of Jason C. Gavejian Jason C. Gavejian

Jason C. Gavejian is the office managing principal of the Berkeley Heights, New Jersey, office of Jackson Lewis P.C. and a member of the firm’s Board of Directors. He is also a Certified Information Privacy Professional (CIPP/US) with the International Association of Privacy…

Jason C. Gavejian is the office managing principal of the Berkeley Heights, New Jersey, office of Jackson Lewis P.C. and a member of the firm’s Board of Directors. He is also a Certified Information Privacy Professional (CIPP/US) with the International Association of Privacy Professionals.

As a Certified Information Privacy Professional (CIPP/US), Jason focuses on the matrix of laws governing privacy, security, and management of data. Jason is co-editor of, and a regular contributor to, the firm’s Privacy blog.

Jason’s work in the area of privacy and data security includes counseling international, national, and regional companies on the vast array of privacy and security mandates, preventive measures, policies, procedures, and best practices. This includes, but is not limited to, the privacy and security requirements under state, federal, and international law (e.g., HIPAA/HITECH, GDPR, California Consumer Privacy Act (CCPA), FTC Act, ECPA, SCA, GLBA etc.). Jason helps companies in all industries to assess information risk and security as part of the development and implementation of comprehensive data security safeguards including written information security programs (WISP). Additionally, Jason assists companies in analyzing issues related to: electronic communications, social media, electronic signatures (ESIGN/UETA), monitoring and recording (GPS, video, audio, etc.), biometrics, and bring your own device (BYOD) and company owned personally enabled device (COPE) programs, including policies and procedures to address same. He regularly advises clients on compliance issues under the Telephone Consumer Protection Act (TCPA) and has represented clients in suits, including class actions, brought in various jurisdictions throughout the country under the TCPA.