EU-U.S. Privacy Shield, Brexit and the Future of Transatlantic Data Flows

33 Pages Posted: 29 Jun 2020

See all articles by Oliver Patel

Oliver Patel

UCL European Institute

Nathan Lea

University College London - Institute for Health Informatics

Date Written: June 4, 2020

Abstract

This report analyses the issues raised by EU-U.S. commercial data flows, including the future status of the Privacy Shield framework and standard contractual clauses (SCCs). It begins by comparing the systems of data protection in the EU and the U.S., highlighting key philosophical, legal and practical differences.

The next section assesses the history of EU-U.S. data flows and the upcoming judgement in the Schrems II case. It then outlines why a clash between U.S. national security laws and mass surveillance on the one hand, and EU data protection and fundamental rights law on the other, renders all transatlantic data transfer mechanisms vulnerable, with few alternative options.

The final section focuses on EU-UK data flows post-Brexit and the UK’s quest for an EU adequacy decision, highlighting the key lessons which can be learnt from the EU-U.S. case study and the challenges which lie ahead. The main argument is that the EU-UK data flows relationship will be complex and could remain unresolved for years. Policy makers, businesses and data protection officers should prepare for a rocky few years ahead, not least due to the high possibility of any adequacy decision facing concerted legal challenges.

Methodology: The findings were informed by analysis of primary documents, an extensive literature review and over sixty anonymous interviews with EU, U.S. and UK politicians, civil servants, ambassadors, regulators, lawyers, business leaders, data protection officers and researchers conducted between 2018 and 2020.

Keywords: data protection, EU law, transatlantic relations, Brexit, data transfers

Suggested Citation

Patel, Oliver and Lea, Nathan, EU-U.S. Privacy Shield, Brexit and the Future of Transatlantic Data Flows (June 4, 2020). Available at SSRN: https://ssrn.com/abstract=3618937 or http://dx.doi.org/10.2139/ssrn.3618937

Oliver Patel (Contact Author)

UCL European Institute ( email )

United States

Nathan Lea

University College London - Institute for Health Informatics ( email )

Gower Street
London, WC1E 6BT
United Kingdom

Do you have a job opening that you would like to promote on SSRN?

Paper statistics

Downloads
235
Abstract Views
799
rank
162,557
PlumX Metrics