Early Signals That the US Executive Order on Data Transfers Will Face Legal Challenge
Early Signals That the US Executive Order on Data Transfers Will Face Legal Challenge
TL;DR — Quick Answer
1 min readExecutive Order 14086 faces structural weakness because it can be revoked by future administrations, making the EU-US Data Privacy Framework inherently fragile.
Executive Order 14086, signed to support the EU-US Data Privacy Framework, was immediately scrutinized by privacy advocates who identified potential vulnerabilities that could lead to judicial invalidation. The order's limitations on intelligence surveillance and its new redress mechanism drew both praise for their ambition and criticism for their potential weaknesses.
Concerns About the Executive Order
The order limits intelligence agency surveillance to what is "necessary and proportionate" -- a standard borrowed from EU law. However, critics argue that the practical interpretation of this standard within the US legal system may differ significantly from European expectations. The redress mechanism, while innovative, relies on presidential appointment of its members, raising questions about independence.
The Vulnerability
Executive orders can be revoked or modified by future administrations without legislative approval. This inherent fragility was flagged as a structural weakness from the outset. Any change in political leadership could undermine the safeguards that the European Commission relied upon when approving the adequacy decision.
What This Means
Organizations should treat the Data Privacy Framework as potentially temporary rather than permanent. Building data infrastructure that can function with or without a valid transatlantic data transfer mechanism is the most resilient approach.
Was this article helpful?
Let us know what you think!
Before you go...
Related Articles
The Trans-Atlantic Data Privacy Framework: Will the Third EU-US Data Deal Survive?
An analysis of the EU-US Data Privacy Framework, the third attempt at legalizing transatlantic data transfers, and why it may face the same fate as Safe Harbor and Privacy Shield.
Adobe Analytics Faces GDPR Scrutiny: The Same Legal Issues as Google Analytics
Adobe Analytics shares the same fundamental GDPR compliance challenges as Google Analytics. Learn why US-based analytics tools face identical data transfer concerns across Europe.
The Case for Banning Surveillance-Based Advertising
A coalition of privacy-focused companies called on EU and US regulators to ban surveillance-based advertising. Here's why this matters for the future of the internet.