Discussions on a new data transfer pact with the US should be concluded within three months, the European Commission said on Friday, after a top European Union (EU) court struck down the previous agreement on concerns over American spying.
The highest EU court last month ruled Safe Harbour, a system that for 15 years has helped companies to avoid cumbersome checks to transfer Europeans' data between offices on both sides of the Atlantic, did not sufficiently protect EU citizens because US authorities had bulk access to the data on national security grounds.
Washington and Brussels have now stepped up negotiations, having been locked in talks to strengthen Safe Harbour after the 2013 revelations of mass US surveillance programmes.
"We need an agreement with our US partners in the next three months," said European Commission vice-president Andrus Ansip.
The commission also issued guidance on Friday to businesses caught out by the ruling about how they could legally continue to transfer Europeans' data to the US.
Businesses can use so-called standard contractual clauses or binding corporate rules to transfer data, as well as asking consumers for their consent.
European data protection regulators gave companies a three-month grace period to put in place these alternative mechanisms.
US and EU companies, from Google to Microsoft, shuffle personal data across the Atlantic on a daily basis, whether it is employee data for multinationals whose human resources functions are in the US, or user data collected by Internet companies for use in the billion-dollar online advertising market.
The Safe Harbour system allowed companies to self-certify they complied with EU privacy law when transferring EU citizens' personal data to countries deemed to have insufficient safeguards, which include the US.
But it came under fire after former US National Security Agency contractor Edward Snowden revealed US spies harvested Europeans' private information directly from big technology companies such as Apple, Facebook and Google.
The European Commission demanded guarantees from Washington that the US would access Europeans' data only on a targeted basis, something which has held up talks for two years.
"We need a bulletproof solution," Ansip said, reflecting concerns among officials that a new agreement could again be challenged in court.
EU justice commissioner Vera Jourova will travel to Washington next week to continue discussions on a new framework.
"The court ruling is our benchmark in our talks with the US," Jourova said at a news conference.
"It is now for the US to come back with their answers."
Share