Transfer of Personal Information EU Court “Inadequate Protection of Rice Invalidation of Agreement” 10:13 am, July 17
The EU-European Court of Justice has ruled that the legal framework for the transfer of personal information between the EU and the United States is invalid because the protection of personal information in the United States is insufficient.
The EU has strengthened the protection of personal information and, at last, introduced the GDPR=General Data Protection Regulation, which strictly regulates the movement of personal information outside the region, and Japanese companies were also forced to take measures.
On the other hand, with the United States, four years ago, we entered into an agreement called "privacy shield" that facilitates the movement of personal information. According to the US Department of Commerce, more than 5,300 companies are using this framework.
On June 16, the EU Court of Justice ruled that the framework would be invalid because US authorities' surveillance may not adequately protect the personal information of EU citizens.
Moreover, when moving personal information outside the EU, it is necessary to protect personal information at the same level as the EU.
This decision does not seem to completely prevent the transfer of personal information from the EU by US companies, but companies that have used the "privacy shield" framework will be forced to take action.
About the Court's decision, US Secretary of Commerce Ross has issued a statement saying he is "deeply disappointed."