{"id":254946,"date":"2023-09-14T08:00:03","date_gmt":"2023-09-14T04:00:03","guid":{"rendered":"https:\/\/cs-webdesigns.com\/?p=254946"},"modified":"2024-08-10T11:13:43","modified_gmt":"2024-08-10T07:13:43","slug":"privacy-shield-2-0-new-start-for-transatlantic-data-transfer-between-eu-and-usa","status":"publish","type":"post","link":"https:\/\/cs-webdesigns.com\/en\/webinsights\/tutorials\/dsgvo\/privacy-shield-2-0-neustart-fuer-den-transatlantischen-datentransfer-zwischen-eu-und-usa\/","title":{"rendered":"Privacy Shield 2.0: New start for transatlantic data transfer between the EU and the USA"},"content":{"rendered":"

First things first: The EU - US Data Privacy Framework (DPF), which came into force on July 10, 2023, means that the Data exchange<\/strong> and thus the use of tracking\/analytics and marketing tools from the USA (e.g. Google Analytics, Webflow, YouTube, Cloudflare, etc.)\u00a0between the EU and the USA is possible again under certain conditions<\/strong>.<\/p>\n

You can find out what these are and what you need to look out for as an entrepreneur or website manager below. Before that, let's take a look at what the Privacy Shield actually is and why version 2.0 was necessary.<\/p>\n

The end of Privacy Shield 1.0<\/h2>\n

What was the Privacy Shield 1.0?<\/h3>\n

Privacy Shield 1.0 came into force in 2016 and was a Data protection agreement between the European Union (EU) and the United States (USA)<\/strong>which regulated the international transfer of personal data between the two regions. It was designed to ensure that personal data of EU citizens transferred to the US was adequately protected.<\/p>\n

This agreement was declared invalid in 2020 due to concerns about data protection and the US government's access to data and was replaced by Privacy Shield 2.0 in July 2023.<\/p>\n

Why was the Privacy Shield 1.0 repealed?<\/h3>\n

In July 2020, the European Court of Justice (ECJ) ruled that the data protection rights of EU citizens were not sufficiently guaranteed, in particular due to the broad access rights of the US intelligence services<\/strong> on it.<\/p>\n

Impact on companies and data protection officers<\/h3>\n

From then on, the use of services, programs and tools that transmit the personal data of EU citizens to servers in the USA when websites are accessed became inadmissible. It could only be used with extensive measures (e.g. only after a detailed explanation in the cookie banner and the consent of the visitor. However, this was never clearly legally secure; there was always a gray area because there was simply no 100% specification and solution.<\/p>\n

Privacy Shield 2.0: The revival<\/h2>\n

What does the Privacy Shield 2.0 entail?<\/h3>\n

Privacy Shield 2.0 was developed to protect the To close gaps in the previous agreement<\/strong> and the Ensure data protection in international data transfers<\/strong>.<\/p>\n

The USA guarantees that the data transferred from the EU to US companies will be processed at the EU's level of protection. However, this only applies to companies that participate in the agreement. To this end, companies must Self-certification process of the US Department of Commerce<\/strong>. This certification must every year<\/strong> new.<\/p>\n

Differences between Privacy Shield 1.0 and 2.0<\/h3>\n

Privacy Shield 2.0 was developed with the clear aim of creating a Improved protection of privacy and data security<\/strong> to offer.<\/p>\n

Here are some specific differences between Privacy Shield 1.0 and 2.0:<\/p>\n