{"id":16748,"date":"2020-07-29T13:44:09","date_gmt":"2020-07-29T11:44:09","guid":{"rendered":"https:\/\/vboxxcloud.com\/blog\/?p=16748"},"modified":"2020-10-27T15:08:14","modified_gmt":"2020-10-27T14:08:14","slug":"privacy-shield-declared-invalid","status":"publish","type":"post","link":"https:\/\/vboxxcloud.com\/blog\/privacy-shield-declared-invalid\/","title":{"rendered":"Privacy Shield declared invalid"},"content":{"rendered":"\n

The Court of Justice of the European Union ruled that the Privacy Shield data-sharing agreement between the United States and the European Union was invalid. If you worry about the privacy of your data, you should ask yourself if you should use American cloud solutions. We explain why.<\/p>\n\n\n\n

<\/div>\n\n\n\n

<\/p>\n\n\n\n

Why was the Privacy Shield agreement repealed?<\/strong><\/h2>\n\n\n\n\n\n

The Privacy Shield was an agreement between the United States and the European Union on how U.S companies handle European users\u2019 data. Simply put, the Privacy Shield prevented American Companies from sharing European Citizens\u2019 data. The CJEU struck down the Privacy Shield program because the privacy protection measures were \u201cinadequate\u201d.<\/p>\n\n\n\n

Read the Court of Justice Of the European Union ruling on Privacy Shield<\/em><\/a><\/p><\/blockquote>\n\n\n\n

The decision comes as part of the ruling for the ongoing Facebook v Schrems<\/em> case, in which Max Schrems highlights issues with data privacy.<\/p>\n\n\n\n

<\/div>\n\n\n\n
\"privacy<\/figure><\/div>\n\n\n\n

What are the consequences?<\/strong><\/h2>\n\n\n\n\n\n

With this decision, the CJEU clearly states that US surveillance laws violate EU fundamental privacy rights. One of the issues is that the US limits most protections to American citizens, leaving the data of foreign customers unprotected. This applies not only to solutions such as Office 365, Google G Suite, or Dropbox, but also American companies that manage your website, CRM, and administration.<\/p>\n\n\n\n\n\n

\u201cCJEU clearly states that US surveillance laws are in conflict with EU fundamental privacy rights\u201d<\/em><\/strong><\/p><\/blockquote>\n\n\n\n\n\n

The court\u2019s decision makes it difficult for US cloud services to position themselves as a secure solution to store and share sensitive data. Many businesses, schools, and governmental agencies still rely on solutions such as Office 365 and Google G Suite. This makes these organizations vulnerable to heavy fines under the GDPR.<\/p>\n\n\n\n

<\/div>\n\n\n\n

US Cloud services are not GDPR Compliant<\/strong><\/h2>\n\n\n\n\n\n

While these solutions are an indispensable part of our lives, several countries have previously pointed out privacy issues that services such as Office 365 have. Germany has already stated that the use of Office 365 in schools is illegal because it violates privacy law. The Dutch government recently uncovered many GDPR violations in an extensive review of Office 365.<\/p>\n\n\n\n

It is not the first time the EU court declares a shared data agreement between the US and the European Union as invalid. In October 2015 the Safe Harbor agreement was also deemed insufficient to protect EU citizens\u2019 privacy rights. It was soon replaced by the Privacy Shield agreement which as you have read is incompatible with EU Privacy Law.<\/p>\n\n\n\n

<\/div>\n\n\n\n

Do you use a US-based (cloud) solution?<\/strong><\/h2>\n\n\n\n\n\n

If you currently use a cloud service such as OneDrive, Dropbox, or Google Drive you may not be GDPR compliant. Even if you signed a data processing agreement, your files could be processed in the US. This means that you cannot guarantee to your clients that your data is 100% GDPR compliant.<\/p>\n\n\n\n

<\/div>\n\n\n\n

How do I know if my solution is hosted on American soil?<\/strong><\/h2>\n\n\n\n\n\n