The new US Executive Order for transatlantic data flows: where does that leave the UK?
Businesses were pleased by President Biden’s Executive Order proposing new commitments for EU-US data flows. While encouraging for future cross-Atlantic digital trade, decision-makers must prioritise turning this long-awaited deal into a reality.
The Order addresses the legal concerns raised in the Court of Justice of the European Union (CJEU) decision in July 2020 which invalidated the data adequacy agreement (known as Privacy Shield) relied on by many organisations transferring personal data between the EU and US.
This includes new safeguards for US Intelligence Services' access and use of personal data, redress mechanisms for individuals in such circumstances, as well as processes to review the Intelligence Community's compliance with the new requirements.
Although this marks a significant step in reaching a new data transfers agreement, there is still a lengthy process ahead for the proposal to be ratified by the European Commission, which could take anywhere as up to six months to complete. The new agreement will also have to stand the test of scrutiny from privacy and civil liberties groups which could trigger a new legal review by the CJEU.
A fragmented landscape
Since the invalidation of the Privacy Shield, businesses have operated under a period of persistent uncertainty while trying to transfer personal data between the EU and US. Alternative transfer mechanisms such as standard contractual clauses (SCCs) have proven unreliable and inaccessible for organisations of all sizes.
This has a direct impact on businesses seeking to innovate, enter new markets, offer new products to consumers, or deliver basic businesses services. By the US Chamber of Commerce’s own estimation, the data transfer relationship between the US and EU is worth around $7.1 trillion. In fact, global data flows now contribute more to global growth than global trade in goods.
While this agreement provides firm reassurance to the hundreds of businesses relying on EU-US data flows, it is long-awaited and has ultimately come at a cost to consumers and businesses trying to innovate. It has also led to delays in the UK’s own plans to reach a data adequacy agreement with the US.
The national security tensions underpinning EU-US data transfers sits at the centre of growing complexities on how personal data can flow across borders. As we see increasing fragmentation between countries and their approaches to data protection, businesses are forced to navigate complicated and often overlapping legal requirements.
This opens up questions as to whether new frameworks are needed to resolve these tensions and what role the UK could play in shaping these solutions.
Latest News from
Be part of the techUK Local Digital Capital Index Working Group!30/01/2023 10:15:00
We are inviting techUK members to apply for a position to sit on the Local Digital Capital Index Working Group and get involved in the creation of the third edition of the Index which we will publish later in this year.
Digital skills scheme for veterans backed by 6 techUK members30/01/2023 09:15:00
Tech sector firms including Capita, Northrop Grumman, Atos, Leonardo UK, Fujitsu and Leidos are supporting the 15,000 Futures initiative created by WithYouWithMe to support veterans into tech sector jobs
Quantum Computing in Energy & Utilities Day27/01/2023 09:20:00
This campaign day will be focusing on the opportunities for quantum computing applications in the energy and utilities sector. We will uncover its potential, viability, and challenges.
Voting Open: techUK Digital Twin Steering Group Chair and Vice Chair25/01/2023 16:05:00
Voting is now open for the techUK Digital Twin Steering Group Chair and Vice Chair positions. The elections will be open until 14 February 2022.
A UK Plan for Chips25/01/2023 15:05:00
The UK needs a plan for 'chips' if we are to fulfil the aim to become a science and tech superpower
Financial Services Policy Explainer | Payment Services Regulations (PSR) Review and Call for Evidence23/01/2023 11:20:00
Helping to map the UK’s Joint Regulatory Oversight Committee’s (JROC) upcoming strategic work, HM Treasury’s latest Review, and Call for Evidence of the UK’s payments regulatory environment will shape the following stages of determining digital technology suppliers’ contributions to building the payments infrastructure of UK Open Banking
How UK tech companies are playing their part to tackle the rise of online fraud20/01/2023 13:10:00
Fraud is now the most commonly experienced crime in the UK, costing over a hundred billion pounds every year, with online fraud making up an increasing proportion of incidents.
Made in the UK, Sold to the World Awards 202317/01/2023 16:10:00
Celebrating UK business success around the world, The Department for International Trade’s Made in the UK, Sold to the World Awards are launching in January 2023