EU signs off on data transfers deal with US

No matter how many agreements it takes, the US and the EU will ensure that data transfer between the continents is possible. There&#x27;s too much trade at risk otherwise.<p>This agreement puts products like Google Analytics back on firm legal footing. Bad luck for Meta that they were the one company singled out for a fine for doing what everyone else was doing in the period between agreements.

noyb is ready to challenge this <a href="https:&#x2F;&#x2F;noyb.eu&#x2F;en&#x2F;european-commission-gives-eu-us-data-transfers-third-round-cjeu" rel="nofollow noreferrer">https:&#x2F;&#x2F;noyb.eu&#x2F;en&#x2F;european-commission-gives-eu-us-data-tran...</a>

The courts will strike this down as well. I don&#x27;t see it ever happening as long as the U.S. doesn&#x27;t change its laws regarding privacy of non US citizens and possibly US citizens as well.<p>Everyone in my surroundings (yes, anecdotal) is switching more and more to EU alternatives, and only uses US cloud-based software, if it can be used on-prem or inside EU datacenters.

I really don&#x27;t know why the commission keeps floating these agreements in which they don&#x27;t even try to address the issues raised by the court. At this point, they have zero credibility.

&gt; The deal, known as EU-U.S. Data Privacy Framework, revives transatlantic exchanges underpinning billions&#x27; worth of digital trade after the EU&#x27;s top court struck down two previous agreements over fears of U.S. intelligence agencies&#x27; snooping.<p>Can someone explain to me what trade this underpins? AFAICT it&#x27;s basically a one way street. Large corporations in the USA get to advertise to citizens of the EU. How does anyone in the EU benefit from this? Or even, how does any large EU corporation benefit from this?

Next round for Max Schrems. Is there even anyone who would bet against him, after winning all of the last rounds?

Woohoo. Does that also mean that we in the EU get US citizens data to play with?

&gt; The agreement ends years of legal limbo and revives free transatlantic digital exchanges.<p>I will believe this when it is challenged in court and it stands. As the article noted, this has been tried before.

Here&#x27;s the decision, would love if anyone reading it could share some highlights:<p><a href="https:&#x2F;&#x2F;commission.europa.eu&#x2F;document&#x2F;fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en" rel="nofollow noreferrer">https:&#x2F;&#x2F;commission.europa.eu&#x2F;document&#x2F;fa09cbad-dd7d-4684-ae6...</a>

&gt; The European Commission adopted a so-called adequacy decision, recognizing the U.S. as a country with sufficient protection for Europeans’ personal data that&#x27;s sent there, effectively sealing the agreement.<p>That’s such a joke. What protections? The only protections I see are in a handful of states like California along with federal regulation for healthcare and payment data.<p>I wish the EU had applied more pressure to US lawmakers to come up with a national data privacy law similar to GDPR and CCPA.<p>All of that said, this agreement was inevitable. If data can’t be transferred between the EU and US, I don’t think it’s hyperbole to call that situation an economic disaster. The US and EU have too much commercial intermingling to have the EU actually cut off data movement to US data centers.

Read between the lines: it means EU got the access gateways to this data, probably for free (until they discover they actually don&#x27;t have access to all of it).<p>For instance the DNA database of the EU ppl stored in the US (you know the &quot;where are your ancestry from&quot; DNA stuff from the US, which were actually used by the &quot;services&quot;, caught right handed).<p>Urban legends say\ they can &quot;find&quot; somebody who got one of his&#x2F;her relative do such DNA sampling.

I guess this is the end of Data Protection now that data can freely flow to the country of the Patriot Act and government agencies that aren&#x27;t the most trustworthy.<p>The EU should just drop all Data Protection laws to make it fair, otherwise all they are doing is increasing the advantage of those agencies that play fast and loose with people&#x27;s data.

What does this mean in practice?<p>Can EU startups finally use US providers?

The article says &quot;The U.S. government on July 3 said it had fulfilled its requirements under the agreement.&quot; But the article detailing that &quot;fulfillment&quot; is behind a paywall. Does anyone know what changes the US made?<p>It would be encouraging if pressure from the EU actually resulted in improved privacy protections in the US.

The EU dropped their pants, yet again<p>But this is no surprise since the US is basically the funder of the EU, they get what they want<p>That&#x27;s very sad

The EU-US data transfer deal is yet another instance of the EU bending over for the US. The US oversteps, the EU retaliates, they negotiate, rinse and repeat. It&#x27;s frustrating to see the EU continually put trade over privacy and trusting the US not to enforce the Cloud Act.<p>It&#x27;s not just about the big names like Google or Meta. What about EU startups? They&#x27;re left in limbo, unsure of what this means for them or the cost involved with complying with an additional set of rules. The final decision is with the court on a case by case basis, just as before!<p>Honestly, I doubt this will make any company at ease about EU to US data transfers - there&#x27;s too much risk &amp; cost for EU companies.

By EU law there has to be “essentially equivalent protection” in the destination country, so this might as well be clickbait by the EU Commission as FISA 702 is absolutely incompatible with GDPR. One of those two needs to go before CJEU will allow this. This is likely Big Business and Three Letter Agency lobbyism at work, to try to draw out the final break-up of the very one-sided data transfers. It won&#x27;t stick unless US gives non-US citizens constitutional rights (as if).

cool so in cloudland, Azure ca finally face some strong competition as orgs who were only using its crappy stuff solely bc it seemed to be a &quot;safer&quot; bet from a EU regulatory perspective get to do more AWS and GCP now...

Does this mean Meta will launch Threads in the EU?