Irish privacy watchdog allowed to take steps against Facebook data transfers US
Irish privacy watchdog DPC may continue investigating Facebook’s data exchange between Europe and the US. The watchdog wants to stop those data transfers because the standard contractual clause under which data protection is regulated would not be sufficient.
The Irish Data Protection Commission ruled in 2020 that Facebook had to stop transferring European user data to servers in the United States following the declaring of the Privacy Shield treaty illegal. That would not provide sufficient protection against disproportionate surveillance by US authorities.
After that judgment, only the so-called standard contractual clauses remained; the legality of such a clause varies from case to case and depends on whether there are effective mechanisms to ensure compliance with the level of data protection required by the EU. The Irish privacy watchdog thinks not. Facebook appealed the order, delaying the proceedings until now.
After the ruling of the Irish High Court, the Data Protection Commission can resume its work. The watchdog must complete its investigation and the resulting suspension order, and the latter must also be approved by other privacy protectors in the EU. That can take months, and during that time there is still the possibility for Facebook to further challenge the procedure, writes The Wall Street Journal, among others.
If the standard contractual clause for Facebook is indeed declared invalid, the company will no longer be allowed to store data of European users on US territory. That means it has to bring the data back to Europe or suspend services to Europeans. A new legal framework for data exchange between the two continents would provide a solution for this, but there is not now.
Much depends on the procedure, as it could set a precedent that would have huge effects on countless companies exchanging data between the two continents. Facebook is dealing with the Irish data protector because the company has its headquarters in that country.