European Union: Adopted LIBRE Resolution on the Draft Implementing Decision by the European Commission on adequate protection of personal data under the EU-US Data Privacy Framework

On 13 April 2023, the Committee on Civil Liberties of the European Parliament adopted a resolution stating that the European Commission should not grant the US an adequacy decision deeming its level of personal data protection equivalent to that of the EU and allowing for transfers of personal data between the EU and the US. According to the Parliament, the EU-US Data Privacy Framework does not provide sufficient safeguards since it allows for bulk collection of personal data, does not make bulk data collection subject to independent prior authorisation, and does not provide clear rules on data retention. Furthermore, the Parliament noted that the decisions of the Data Protection Review Court created under the Framework would be secret, violating citizens’ right to access and rectify data about them. Finally, the Parliament recommends that the Commission negotiate a data transfer framework that will likely be held up in court.