{"id":21713,"date":"2019-12-20T10:53:36","date_gmt":"2019-12-20T10:53:36","guid":{"rendered":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/?p=21713"},"modified":"2024-06-24T15:25:56","modified_gmt":"2024-06-24T14:25:56","slug":"certainty-for-eu-cross-border-data-flows-hinted-at-in-schrems-ii-case-may-be-short-lived","status":"publish","type":"post","link":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/certainty-for-eu-cross-border-data-flows-hinted-at-in-schrems-ii-case-may-be-short-lived\/","title":{"rendered":"Certainty for EU cross-border data flows hinted at in Schrems II case may be short-lived"},"content":{"rendered":"

Those breathing a sigh of relief at the Advocate General\u2019s opinion yesterday in the Schrems II case should hold their breath. Uncertainty clouds the horizon for the Privacy Shield and global data flows.<\/em><\/p>\n

The Advocate General (AG) to the European Court of Justice delivered his opinion yesterday in a case known as Schrems II. After widespread speculation the AG would recommend the court invalidate standard contractual clauses (SCC), he surprised us \u2013 in many ways.<\/p>\n

At first glance, his words gave solace to companies that rely on cross-border data flows (CBDFs) and the consumers that benefit from them, saying his analysis revealed nothing that would \u201caffect the validity of Commission Decision 2010\/87\/EU of 5 February 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries.\u201d But a closer reading of his 95-page opinion<\/a> will create widespread uncertainty while we await the court\u2019s verdict next year.<\/p>\n

What\u2019s at stake:<\/p>\n

    \n
  1. Uncertainty regarding SCC will continue. <\/strong>While the decision establishing SCC is likely to be valid, it is up to companies using the SCC to determine whether they provide an adequate level of protection on a case-by-case basis. This leaves companies to determine extremely difficult questions about the compatibility of EU human rights and US surveillance law. Data protection authorities ultimately have a duty to step in determine the issue if complaints are made.<\/li>\n
  2. Privacy Shield may yet fall.<\/strong> The AG declined to recommend a decision to the court regarding the Privacy Shield, as it had not been asked to. However, in an exhaustive analysis, he cast serious doubt on whether the Privacy Shield would pass the test of providing \u2018essentially equivalent\u2019 protection to EU citizens when taking into account US surveillance law and practice. While the current case may not decide the fate of the Privacy Shield, all eyes will be on the Quadrature du Net case (in the General Court of the CJEU) which was put on hold pending the outcome of this case.<\/li>\n
  3. Essential equivalence test for SCC will be hard for companies to meet. <\/strong>The AG confirmed that \u2018essential equivalence\u2019 is also the test for SCC. Given the AG\u2019s view on essential equivalence in relation to the Privacy Shield, this casts doubt on companies\u2019 ability to argue the SCC they use provides an equivalent level of protection.<\/li>\n
  4. Doubt about US data flows could disrupt global flows.<\/strong> If there are doubts over US surveillance law and practice, the same doubts should spread to a large number of countries. Given that SCC are widely used for transfers of EU data to most countries, this still leaves the future of these contracts in the balance. The same concerns could even apply to accountability mechanisms such as binding corporate rules or certifications under GDPR, and may inspire reciprocal decisions in non-EU countries.<\/li>\n<\/ol>\n

    Why it matters:<\/p>\n

    The mobile industry enables innovations such as 5G, IoT, connected cars, industrial automation and big data analytics for the benefit of ordinary people. Over the next five years, for example, global IoT connections are forecasted to more than double to 25 billion from 11 billion today. And the productivity boost of IoT could be $340 billion a year, according to GSMA Intelligence.<\/p>\n

    But it can only deliver these benefits effectively in an open world where data can flow across borders and privacy can be assured. Ensuring human rights and privacy standards are respected is essential for trust and scrutiny by data protection authorities and the courts is a necessity. The AG opinion yesterday validates one of the methods for data flows, but it also hints at further challenges down the line. Data protection authorities urgently need to come up with a clear framework that provides legal certainty and a range of mechanisms that mobile operators can rely on.<\/p>\n","protected":false},"excerpt":{"rendered":"

    Those breathing a sigh of relief at the Advocate General\u2019s opinion yesterday in the Schrems II case should hold their breath. Uncertainty clouds the horizon for the Privacy Shield and global data flows. The Advocate General (AG) to the European Court of Justice delivered his opinion yesterday in a case known as Schrems II. After […]<\/p>\n","protected":false},"author":106,"featured_media":21716,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","footnotes":""},"categories":[9461,1730],"tags":[],"algolia_discover_type":[12147],"class_list":["post-21713","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cross-border-data-flows","category-data-privacy","algolia_discover_type-article"],"yoast_head":"\nCertainty for EU cross-border data flows hinted at in Schrems II case may be short-lived - Public Policy<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/certainty-for-eu-cross-border-data-flows-hinted-at-in-schrems-ii-case-may-be-short-lived\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Certainty for EU cross-border data flows hinted at in Schrems II case may be short-lived\" \/>\n<meta property=\"og:description\" content=\"Those breathing a sigh of relief at the Advocate General\u2019s opinion yesterday in the Schrems II case should hold their breath. Uncertainty clouds the horizon for the Privacy Shield and global data flows. The Advocate General (AG) to the European Court of Justice delivered his opinion yesterday in a case known as Schrems II. After […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/certainty-for-eu-cross-border-data-flows-hinted-at-in-schrems-ii-case-may-be-short-lived\/\" \/>\n<meta property=\"og:site_name\" content=\"Public Policy\" \/>\n<meta property=\"article:published_time\" content=\"2019-12-20T10:53:36+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-06-24T14:25:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-content\/uploads\/2019\/12\/CBDF-Blog_HeroImage_cropped.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"650\" \/>\n\t<meta property=\"og:image:height\" content=\"320\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"siteapprovals@gsma.com siteapprovals@gsma.com\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"siteapprovals@gsma.com siteapprovals@gsma.com\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Certainty for EU cross-border data flows hinted at in Schrems II case may be short-lived - Public Policy","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/certainty-for-eu-cross-border-data-flows-hinted-at-in-schrems-ii-case-may-be-short-lived\/","og_locale":"en_US","og_type":"article","og_title":"Certainty for EU cross-border data flows hinted at in Schrems II case may be short-lived","og_description":"Those breathing a sigh of relief at the Advocate General\u2019s opinion yesterday in the Schrems II case should hold their breath. Uncertainty clouds the horizon for the Privacy Shield and global data flows. The Advocate General (AG) to the European Court of Justice delivered his opinion yesterday in a case known as Schrems II. After […]","og_url":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/certainty-for-eu-cross-border-data-flows-hinted-at-in-schrems-ii-case-may-be-short-lived\/","og_site_name":"Public Policy","article_published_time":"2019-12-20T10:53:36+00:00","article_modified_time":"2024-06-24T14:25:56+00:00","og_image":[{"width":650,"height":320,"url":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-content\/uploads\/2019\/12\/CBDF-Blog_HeroImage_cropped.jpg","type":"image\/jpeg"}],"author":"siteapprovals@gsma.com siteapprovals@gsma.com","twitter_card":"summary_large_image","twitter_misc":{"Written by":"siteapprovals@gsma.com siteapprovals@gsma.com","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/certainty-for-eu-cross-border-data-flows-hinted-at-in-schrems-ii-case-may-be-short-lived\/","url":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/certainty-for-eu-cross-border-data-flows-hinted-at-in-schrems-ii-case-may-be-short-lived\/","name":"Certainty for EU cross-border data flows hinted at in Schrems II case may be short-lived - Public Policy","isPartOf":{"@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/certainty-for-eu-cross-border-data-flows-hinted-at-in-schrems-ii-case-may-be-short-lived\/#primaryimage"},"image":{"@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/certainty-for-eu-cross-border-data-flows-hinted-at-in-schrems-ii-case-may-be-short-lived\/#primaryimage"},"thumbnailUrl":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-content\/uploads\/2019\/12\/CBDF-Blog_HeroImage_cropped.jpg","datePublished":"2019-12-20T10:53:36+00:00","dateModified":"2024-06-24T14:25:56+00:00","author":{"@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/#\/schema\/person\/1de6b0ca6b8b9dd72ef21c112a6eb954"},"breadcrumb":{"@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/certainty-for-eu-cross-border-data-flows-hinted-at-in-schrems-ii-case-may-be-short-lived\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/certainty-for-eu-cross-border-data-flows-hinted-at-in-schrems-ii-case-may-be-short-lived\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/certainty-for-eu-cross-border-data-flows-hinted-at-in-schrems-ii-case-may-be-short-lived\/#primaryimage","url":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-content\/uploads\/2019\/12\/CBDF-Blog_HeroImage_cropped.jpg","contentUrl":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-content\/uploads\/2019\/12\/CBDF-Blog_HeroImage_cropped.jpg","width":650,"height":320,"caption":"Woman with mobile phone on the street"},{"@type":"BreadcrumbList","@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/certainty-for-eu-cross-border-data-flows-hinted-at-in-schrems-ii-case-may-be-short-lived\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/"},{"@type":"ListItem","position":2,"name":"Certainty for EU cross-border data flows hinted at in Schrems II case may be short-lived"}]},{"@type":"WebSite","@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/#website","url":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/","name":"Public Policy","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/#\/schema\/person\/1de6b0ca6b8b9dd72ef21c112a6eb954","name":"siteapprovals@gsma.com siteapprovals@gsma.com","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/319eea4ee4f9fa4658372fde39145507?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/319eea4ee4f9fa4658372fde39145507?s=96&d=mm&r=g","caption":"siteapprovals@gsma.com siteapprovals@gsma.com"}}]}},"featured_image_url":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-content\/uploads\/2019\/12\/CBDF-Blog_HeroImage_cropped.jpg","_links":{"self":[{"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/posts\/21713"}],"collection":[{"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/users\/106"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/comments?post=21713"}],"version-history":[{"count":4,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/posts\/21713\/revisions"}],"predecessor-version":[{"id":21720,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/posts\/21713\/revisions\/21720"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/media\/21716"}],"wp:attachment":[{"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/media?parent=21713"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/categories?post=21713"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/tags?post=21713"},{"taxonomy":"algolia_discover_type","embeddable":true,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/algolia_discover_type?post=21713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}