New Safe Harbour proposals 'must include suspension clause'
EU: We should instantly stop sharing data with US if privacy under threat


The second iteration of the Safe Harbour data sharing initiative between Europe and the US must be able to be suspended if the EU feels privacy concerns appear again.
The EU Justice Commissioner said following the suspension of the original Safe Harbour legislation in October, any new version of the agreement would be subject to a suspension clause.
"We have been negotiating a renewed, safer arrangement for transatlantic data transfers with our American partners since 2014," Commissioner Vera Jourova said.
"A renewed arrangement that will mean robust safeguards for citizens and legal certainty for businesses. I got the impression in Washington that the US side shares this aim and I hope they share our sense of urgency after the judgement."
"In the new Safe Harbour there will be a suspension clause, saying that under concrete conditions we are going to suspend (it)," Jourova said.
The understanding is meant to guarantee the same level of protection for EU data when it is transferred to the US.
However, the EU Court of Justice ruled the last Safe Harbour agreement invalid following many of NSA whistleblower Edward Snowden's revelations that led the court to decide the US would value anti-terrorism measures above personal privacy.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
The agreement also relied on the self-certification of American businesses that they would protect data when transferred to a US-based datacentre, but Snowden revealed this data can still be snooped upon by authorities, meaning customer data was not safe from prying eyes at all.
Some of the companies using Safe Harbour as justification for transferring data between the EU and US could face legal action in January 2016 while the second iteration of the bill are discussed.
The parties have until 31 January 2016 to reach a new agreement.

Clare is the founder of Blue Cactus Digital, a digital marketing company that helps ethical and sustainability-focused businesses grow their customer base.
Prior to becoming a marketer, Clare was a journalist, working at a range of mobile device-focused outlets including Know Your Mobile before moving into freelance life.
As a freelance writer, she drew on her expertise in mobility to write features and guides for ITPro, as well as regularly writing news stories on a wide range of topics.
-
Should AI PCs be part of your next hardware refresh?
AI PCs are fast becoming a business staple and a surefire way to future-proof your business
By Bobby Hellard
-
Westcon-Comstor and Vectra AI launch brace of new channel initiatives
News Westcon-Comstor and Vectra AI have announced the launch of two new channel growth initiatives focused on the managed security service provider (MSSP) space and AWS Marketplace.
By Daniel Todd
-
What is EU-US Privacy Shield?
In-depth A look at the now invalidated framework US companies relied on to transfer data to and from the European Union
By Dale Walker
-
Privacy Shield should be suspended, say MEPs
News Committee cites Cambridge Analytica scandal and CLOUD Act as obstacles
By Joe Curtis
-
Safe Harbour replaced with EU-US Privacy Shield
News The new agreement may take effect from July if both parties agree on its directions
By Clare Hopping
-
European data protection supervisor says Privacy Shield not robust enough
News Giovanni Buttarelli said the European Commission needs to develop a longer-term solution for sharing data across continents
By Joe Curtis
-
Has the US forced Reddit to secretly hand over user data?
News Disappearance of "warrant canary" seen as tacit admission of government data request
By Joe Curtis
-
Privacy Shield hammers another nail in the coffin of data protection
Opinion Safe Harbour’s replacement is based entirely on trust - what a big mistake
By Davey Winder
-
EU throws US data transfers into doubt – again
In-depth Europe’s data watchdog refuses to extend Safe Harbour grace period
By Joe Curtis
-
Will the new Safe Harbour deal really protect your data?
Analysis Businesses and campaigners react to Privacy Shield, the new EU-US data transfer agreement
By Joe Curtis