Jayne Rothman examines the impact of a new set of compliance standards
- New data privacy compliance obligations have invalidated the previous Safe Harbour privacy accord between the EU and the US.
- There is now a new set of rules and compliance standards for businesses to learn.
A complicated picture just got more complex. The transatlantic transfer of personal data between the EU and the US is now governed by new data privacy compliance obligations following an October 2015 ruling that invalidated the previous Safe Harbour privacy accord. For businesses, this means a new set of rules to learn and a new set of compliance standards.
The background to this latest development can be traced back to 1995 and the establishment of the EU Data Protection Directive (Directive 95/46/EC). This Directive was enacted to balance the protections for individuals’ privacy with the free movement of personal data within the EU. The Directive established limits regarding the collection and use of personal data and required that each member state establish an independent national body to supervise activities associated with the processing of personal
