CDD Tells EU to End “Privacy Shield” deal with U.S., FTC cannot protect U.S. consumer privacy, let alone EU citizens

The Center for Digital Democracy (CDD), a leading US NGO specializing in consumer data protection issues in the digital marketplace, is pleased to respond to the request that we provide information applicable to first annual review of the EUUS Privacy Shield. CDD has been assessing the Privacy Shield since it came into force in 2016, in part as a result of its work coordinating the activities from the US side of the Transatlantic Consumer Dialogue (TACD) working group on the Information Society.

EU citizens and consumers who deal with companies enrolled in the Privacy Shield program confront a serious erosion of their data protection and privacy rights. The rights of EU citizens under the Privacy Shield program are not equivalent to how they would be protected by EU law. We urge the Commission and EU Data Protection Authorities to suspend the Privacy Shield in light of its lack of any policies, rules, or enforcement that would provide meaningful adequacy or equivalency. The Commission should insist that U.S. companies targeting EU citizens or consumers must operate under the forthcoming General Data Protection Regulation (GDPR) framework.

For this submission, we reviewed the activities of several major U.S. companies enrolled in the Privacy Shield program, examining their submissions on the U.S. Commerce Department website (including descriptions of their activities, the link to and content of their privacy policy statements). We compared these statements to the actual data collection and use-related activities conducted by the companies, including their own descriptions of how they operationalize their business goals. We supplemented this analysis with the information that CDD extensively gathers on the commercial digital marketplace, such as automated “programmatic” decision making and other contemporary consumer-directed applications.

—-

For the full PDF of the letter, see attachment in link below.