Irish data watchdog orders Facebook to halt EU user data transfers to the US

Nick Clegg suggests cancelling its transfer mechanism could cause chaos for businesses and the global economy

Nick Clegg looking at something

Facebook has confirmed that the Irish Data Protection Commissioner (DPC) has issued the social network with a preliminary order to stop transferring EU user data to the US.

The order has been described as "well progressed" according to the Independent and could have wider implications for tech companies that transfer data across the Atlantic.

It's the first move by the DPC since July, when the European Court of Justice ruled that Privacy Shield, the mechanism that companies used to transfer EU data to the US, was no longer valid now that GDPR is in force.

The ruling also stated 'standard contractual clauses' (SCCs) were valid as a data transfer mechanism, provided that data controllers carry out assessments on whether it's possible for these contractual terms to be upheld in any country where invasive surveillance laws exist, such as the US.

The DCP has suggested to Facebook that SCCs cannot in practice be used for data transfer between the EU and the US, according to the social network's vice president of global affairs and communications, and former UK deputy prime minister, Nick Clegg.

While the inquiry is still in its early stages, Clegg has said it could have far-reaching effects on the businesses that rely on SCCs and could cause near-term chaos for the global economy.

"The impact would be felt by businesses large and small, across multiple sectors," Clegg wrote in a blog post. "In the worst-case scenario, this could mean that a small tech startup in Germany would no longer be able to use a US-based cloud provider. A Spanish product development company could no longer be able to run an operation across multiple time zones. A French retailer may find they can no longer maintain a call centre in Morocco."

"The effects would reach beyond the business world, and could impact critical public services such as health and education. Ireland's Covid Tracking App states, in its terms, that it relies on SCCs as one of a number of mechanisms to transfer data to one of its processors in the US. International cloud providers and email platforms provide services to schools, Universities and hospitals across Europe. Millions of people use video conferencing software every day, to keep in touch with friends and family who live in different countries."

Featured Resources

Navigating the new normal: A fast guide to remote working

A smooth transition will support operations for years to come

Download now

Leading the data race

The trends driving the future of data science

Download now

How to create 1:1 customer experiences at scale

Meet the technology capable of delivering the personalisation your customers crave

Download now

How to achieve daily SAP releases

Accelerate the pace of SAP change to support your digital strategy

Download now

Recommended

ICO to relax GDPR enforcement during coronavirus economic downturn
General Data Protection Regulation (GDPR)

ICO to relax GDPR enforcement during coronavirus economic downturn

16 Apr 2020
The NHS teams up with Apple and Google on coronavirus tracking app
privacy

The NHS teams up with Apple and Google on coronavirus tracking app

14 Apr 2020
Health sites are 'unlawfully' sharing medical data with Facebook and Google
data protection

Health sites are 'unlawfully' sharing medical data with Facebook and Google

7 Apr 2020
Supreme Court rules Morrisons was not liable for 2014 data breach
data protection

Supreme Court rules Morrisons was not liable for 2014 data breach

1 Apr 2020

Most Popular

16 ways to speed up your laptop
Laptops

16 ways to speed up your laptop

16 Sep 2020
16 ways to speed up your laptop
Laptops

16 ways to speed up your laptop

16 Sep 2020
The Xbox Series X shows how far the cloud still has to go
Cloud

The Xbox Series X shows how far the cloud still has to go

25 Sep 2020