European Union privacy regulators will soon question President Donald Trump on the U.S. commitment to the EU-U.S. Privacy Shield data transfer pact.
Although Trump’s Jan. 25 immigration executive order limiting extension of the Privacy Act to non-U.S. citizens doesn’t have a direct legal effect on the Privacy Shield, it has raised concerns over U.S. intentions. The Article 29 Working Party of data protection officials from the 28 EU countries said in a Feb. 16 statement that it would write to the Trump administration “pointing out concerns and asking for clarifications on the possible impact” the order may have on the Privacy Shield.
The Privacy Shield allows U.S. companies that self-certify with the Commerce Department their compliance with EU-approved privacy and security principles to legally transfer personal data from the EU to the U.S. The Privacy Shield is relied upon by over 1,000 U.S. companies, including Alphabet Inc.’s Google, Microsoft Corp. and Facebook Inc., as well as thousands more EU companies that send data to those U.S. companies.