In blow to companies, Europe’s top court says data stored on US servers not safe from spying

Facebook and thousands of other companies could find it vastly more complicated to do business in Europe after a court ruled that personal data sent to U.S. servers is potentially unsafe from government spying.

LUXEMBOURG — Facebook and thousands of other companies could find it vastly more complicated to do business in Europe after a court ruled that personal data sent to U.S. servers is potentially unsafe from government spying.

Some 4,500 companies have long been able to store users’ personal data — everything from status updates and photos to personal information like bank details and home addresses — where they see fit, often in the U.S.

That could change after Europe’s top court on Tuesday declared invalid a 15-year-old pact allowing the unfettered transfer of personal data outside the European Union’s 28 countries.

The case was brought by an Austrian law student in the wake of revelations by former U.S. National Security Agency contractor Edward Snowden of the extent of the NSA’s surveillance programs.

Max Schrems complained that U.S. law doesn’t offer sufficient protection against surveillance of data transferred by Facebook to servers in the United States.

The verdict could have far-reaching implications for companies operating in Europe.

It does not mean companies have to immediately stop transferring data to the U.S. Rather, it opens up the possibility that European regulators will be inundated by complaints by consumers who do not want their data stored in the U.S. That would make it hugely difficult for companies to do business.

“The message is clear — that mass surveillance is not possible and against fundamental rights in Europe,” said Schrems after the ruling.

Companies, he added, “cannot just aid foreign spies and get away with it because they fall under European jurisdiction.”

The so-called “safe harbour” agreement has allowed companies to send data on users from the EU to U.S. since 2000. That includes information on how users behave online, such as what pages they visit and where they spend money. But also email addresses, passwords, bank details and payroll figures. It does not include the content of emails, however.

Since its creation, the agreement has helped Internet businesses such as social media. Facebook and Google, for example, earn money from advertising that relies on data on how users behave on the Internet.

But the revelations of NSA spying have provoked a backlash from European consumers and governments.

In a separate case, for example, Google is being forced to consider Europeans’ requests to delete from its search results links to content that they find offensive or inappropriate.

The European Commission, the EU’s executive branch, has tried to revise the “safe harbour” agreement over the past two years and expects Tuesday’s ruling will support that effort.

“Today’s judgment is an important step toward upholding Europeans’ fundamental rights to data protection,” said European Commission Vice-President Frans Timmermans. “In the light of the ruling we will continue this work toward a renewed and safe framework for the transfer of personal data across the Atlantic.”

In Washington, White House spokesman Josh Earnest said there are concerns about the economic consequences of the ruling, which is being reviewed.

“We are disappointed that the court has struck down an agreement that since 2000 has proved to be critical in protecting both privacy and fostering economic growth in the United States and the European Union,” Earnest said.

He said the administration believes the decision was based “on incorrect assumptions about data privacy protections in the United States.”

He said the U.S. will work with the EU to provide certainty to companies by releasing an updated framework. The U.S. and the EU will continue working to reach an updated data sharing agreement.

Schrems, the Austrian student, complained to the data protection authorities in Ireland, where Facebook has its European headquarters, that his information was not safe on U.S. servers.

Irish authorities initially rejected his complaint, pointing to the “safe harbour” agreement. Now, the Irish data commissioner will now be required to “decide whether … transfer of the data of Facebook’s European subscribers to the United States should be suspended on the ground that that country does not afford an adequate level of protection of personal data,” the court said.

In a statement, Facebook said it’s now “imperative that EU and U.S. governments ensure that they continue to provide reliable methods for lawful data transfers and resolve any issues relating to national security.”

AmCham EU, which represents U.S. companies across all sectors in the EU, said the ruling could have serious implications for economic activity.

Reaching a new agreement on data sharing will be difficult, says professor Felix Wu of Cardozo Law School in New York.

“Safe harbour was never designed to address U.S. government surveillance,” he said. Because the 4th Amendment protecting U.S. citizens’ privacy does not apply to people outside the U.S., the data agreement cannot adequately protect Europeans’ data stored in the U.S.

If European authorities are inundated with complaints about data being stored in the U.S., companies may opt to set up more of their business in Europe. That’s what SWIFT, the international financial payments processor, did.

Meanwhile, Schrems was lauded by Snowden, the former NSA contractor who flew to Moscow two years ago after revealing information about the agency’s eavesdropping.

“You’ve changed the world for the better,” Snowden said in a tweet.

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Bryson, six, and Mara, eight, play with puppies from Dogs With Wings Saturday. (Photo by Sean McIntosh/Advocate staff)
Dogs With Wings introduces Red Deer program

A program that trains puppies to be certified service, autism, facility and… Continue reading

Alberta’s Chief Medical Officer of Health Dr. Deena Hinshaw says the greater lag time between first and second doses will allow more Albertans to be effectively vaccinated sooner. (File photo)
Alberta extends time between vaccine doses means more people to get shot sooner

National Advisory Committee on Immunization says doses can be to up to four months apart

People watch the sun set in the Red Sea port city of Jiddah, Saudi Arabia, Monday, Jan. 18, 2021. (AP Photo/Amr Nabil)
OPEC cartel, allies face decision on increasing oil output

OPEC Plus made deep cuts in output in 2020 to stave off a collapse in prices

The Twitter Canada office in Toronto is shown in this undated handout photo. Twitter Inc. will be bulking up on Canadian talent this year with a hiring spree meant to add dozens of engineers in the country to its staff. The San Francisco, Calif.-based social media giant said Thursday that it plans to form its first Canadian engineering hub with at least 24 new workers it will soon hire. THE CANADIAN PRESS/HO - Twitter Canada
Twitter to launch engineering hub in Canada with dozens of hires this year

Twitter says technical talent has been evolving in the Canada recently

Jim Lowes, a living kidney donor who was inspired by Humboldt Broncos bus crash victim Logan Boulet, is photographed at his home in Burlington, Ont., on Thursday, Feb. 25, 2021. Green Shirt Day, April 7, was started after the crash that killed 16 people and coincides with the anniversary of Logan Boulet’s death. Boulet’s family donated his organs after the crash. THE CANADIAN PRESS/Peter Power
Three years after Broncos bus crash, Logan Boulet still inspiring organ donation

Nearly 147,000 Canadians registered to be donors in two months

FILE - In this Feb. 23, 2021, file photo, a vehicle rests on its side after a rollover accident involving golfer Tiger Woods in the Rancho Palos Verdes suburb of Los Angeles. Detectives are looking at data from the so-called “black box” of Tiger Woods’ SUV to get a clearer picture of what occurred during the Southern California rollover crash last week that seriously injured the golf star, authorities said Wednesday, March 3. (AP Photo/Marcio Jose Sanchez, File)
Detectives look at SUV’s ‘black box’ from Tiger Woods crash

California law allows law enforcement to seek search warrants for data recorders

FILE - In this Jan. 30, 2019 file photo, Alex Kurtzman, from left, Heather Kadin, Anson Mount, Sonequa Martin-Green and Ethan Peck participate in the “Star Trek: Discovery” show panel during the CBS All Access presentation at the Television Critics Association Winter Press Tour at The Langham Huntington in Pasadena, Calif. Paramount+ debuts Thursday, March 4, 2021 as the latest — and last — streaming option from a major media company, this time from ViacomCBS. The company hopes its smorgasbord of offerings — live sports and news, reboots of its properties like “Frasier” and “Rugrats,” original shows like “Star Trek: Discovery” and the ViacomCBS library will entice viewers(Photo by Willy Sanjuan/Invision/AP, File)
Will Paramount+ be a mountain or a molehill in streaming?

Over the last year and a half more and more streaming services have debuted

Red Deer Regional Hospital Centre can accommodate up to 20 patients requiring a ventilator, says Alberta Health Services.  File photo by Advocate staff
Opinion: UCP government reneging on Red Deer hospital funding

Another year, another Alberta budget and another blow to central Albertans. Budget… Continue reading

Seattle Storm guards Sue Bird, right, and Jordin Canada pose for photos Wednesday, March 3, 2021, on the roof of the Space Needle in Seattle after they raised a flag with the team's new logo on it. Bird re-signed with the Storm earlier in the week. (AP Photo/Ted S. Warren)
Sue Bird staying busy with 20th Seattle season on horizon

Sue Bird staying busy with 20th Seattle season on horizon

Lille players celebrate after Jonathan David scored his side's second goal during the French League One soccer match between Lille and Marseille at the Stade Pierre Mauroy stadium in Villeneuve-d'Ascq, France, Wednesday, March 3, 2021. (AP Photo/Michel Spingler)
David scores 2 as Lille wins to stay two points clear of PSG

David scores 2 as Lille wins to stay two points clear of PSG

Canada defender Shelina Zadorsky, right, passes the ball in front of Argentina forward Sole Jaimes (9) during the second half of a SheBelieves Cup women's soccer match, Sunday, Feb. 21, 2021, in Orlando, Fla. Alphonso Davies and Shelina Zadorsky have been named Canada Soccer’s players of the month for February. THE CANADIAN PRESS/AP, Phelan M. Ebenhack
Davies, Zadorsky named Canada Soccer’s players of the month for February

Davies, Zadorsky named Canada Soccer’s players of the month for February

Most Read