End of the Privacy Shield – what could it mean to your business

HubProActive (HPA) is a Business Management System that provides a framework for businesses to carry out day to day activities in an efficient and structured way.

End of the Privacy Shield – what could it mean to your business

I have been following with interest the progress of the ECJ review of the Privacy Shield agreement for the flow of personal data between the EU member states and the US.

As Brexit approaches, we all have to get our heads around changes in legislation regarding our relationship with Europe. And now there is a new challenge, as an article in WIRED UK magazine explains.

For the past 20 years, data has been allowed to flow freely between the EU and the US via a sharing agreement called the Privacy Shield. This data underpins digital trade and a great deal of economic activity, including emails, clinical trials and apps such as Zoom.

But an overnight change in policy about data transfer between the EU and the US has serious ramifications for the UK. On 16 July 2020, the European Court of Justice (ECJ) invalidated the Privacy Shield, citing concerns over whether the US was a safe haven for EU residents’ data.

So why does this concern us in Britain?

In the short period of time we have to secure a Brexit agreement, Britain has been trying to confirm that data could still move freely from the EU to the UK from 2021. It also wants unrestricted data transfer to the US, and it was hoped that a Privacy Shield-style system could be implemented.

The ECJ ruling invalidated this, which will not only cause delay and expense for thousands of US companies, but will impact on businesses here in the UK.

We can, as an alternative to the Privacy Shield, use Standard Contractual Clauses (SCC) but switching to this channel will mean extra bureaucracy and cost, and will affect start-ups and small enterprises the most.

The ECJ is not entirely happy with the SCC channel either and is insisting that the level of security is as high as within the EU. The worst-case scenario is that SCC could be invalidated to, too. For the time being though, the SCC remains a valid mechanism for transferring personal data outside of the EU albeit with additional requirements to undertake and document a positive risk assessment.

Whatever the outcome, there will be severe disruption to data flow between the EU-UK-US.

Osborne Clarke has published good guidance on what to do next. To access the guidance click here.

Leave a Comment

Your email address will not be published. Required fields are marked *


“It’s been really easy to maintain our ISO audit schedule by carrying out remote audits using HPA. We also carried out our external surveillance audit remotely using HPA and the auditor was impressed with the level of information he was able to view remotely during the audit. HPA has enabled us to retain our ISO certification without any issues.”

"We’ve been able to carry on working as normal despite being in different locations. Having HPA has really helped keep the business running smoothly and kept staff up-to-date throughout the lockdown."

"Having HPA meant that it was easy to get people set up working from home quickly, knowing that they would have access to everything they needed to enable them to continue doing their jobs with no interruption to their daily activities."

"HPA has been invaluable during lockdown, it has enabled our staff to easily set up at home and access all the documentation they need to carry out their roles.  Using HPA has ensured that we remain compliant with staff using the latest versions of documents and maintain continuity whilst working remotely."

"We have been able to keep people informed of updates and information relating to changes required during the lockdown with updated and new documents added as we needed to, which the staff have been able to access easily, keeping them updated of progress."

"Having HPA meant it was a lot easier to get people set up working from home quickly, knowing that they could access all the right documents they would need was one less thing to have to consider when relocating people."

Try HubProActive for 30 days for free and see the benefits

Our software team can arrange an online demo to allow you to see the benefits of HubProActive.

Scroll to Top