EU Watchdog Says Needs Time to Study Data Deal With United States

Negotiators from the European Union and the United States agreed the data pact on Tuesday. It will replace the Safe Harbour framework, which a top EU court ruled illegal last year amid concerns over mass US government snooping.

"We want to receive the documents in order to assess whether this (newly agreed) EU-US Privacy Shield can answer the privacy concerns raised," said Isabelle Falque-Pierrotin, chair of the WP29 grouping of data protection authorities.

WP29 only issues recommendations but it is influential because its members enforce data protection across the 28-nation EU and the bloc's executive, the European Commission, has asked it to provide its expert guidance on the new pact.

Falque-Pierrotin said the group expected to have relevant documents by the end of February and to be able to reach a conclusion by the end of April. Pending its final verdict, some data transfers will not be allowed, she added.

Under the new Privacy Shield, the Commission said US companies would face stronger obligations to protect Europeans' personal data, including limitations to US surveillance programmes.

The issue of data privacy has become politically charged in Europe since revelations by former US National Security Agency contractor Edward Snowden, which included that US authorities had been harvesting private information directly from big tech companies such as Google.

The WP29 group said intelligence services should respect four essential guarantees when dealing with data on EU citizens - clear rules on processing, access based on need and proportionality, independent oversight and effective remedies.

"We have concerns on the transfer regarding the scope of surveillance and particularly the remedies. The question is whether the (new) arrangement answers these concerns or not," Falque-Pierrotin said.

Many companies, both US and European, used the Safe Harbour system to help them get around cumbersome checks to transfer data between offices on both sides of the Atlantic. That includes payroll and human resources information as well as lucrative data used for online advertising, which is of particular importance to tech companies.

© Thomson Reuters 2016