Abstrakt
The purpose of this article is to discuss recent developments in the EU?US relations related to the protection of personal data. The Privacy Shield Agreement negotiated in 2016 has resulted in the resumption of the EU?US cross-border flow of data suspended following the CJEU judgment in the Schrems case. The Court in its ruling pointed to the fundamental problems of the incompatibility of the EU and US legislation, in particular in the area of protection of basic values guaranteed by the EU Charter of Fundamental Rights. Implementation of the General Data Protection Regulation is also important factor in discussion of existing and future EU?US data flows regulations. Comparison between Privacy Shield and its predecessor ? the Safe Harbor? is used to reveal important improvements that were implemented to ensure compatibility with the EU regulations. This includes updated set of rules that US organizations should follow when processing data transferred from EU. In result, regulations related to transatlantic cooperation in the area of protection of privacy and personal data require a deeper analysis not only on
the grounds of existing judgments of the CJEU, but also in the light of the US legal safeguards that are available to data subjects. One of the new US legal mechanisms that is intended to provide adequate guarantees of protection for EU individuals relates to the Judicial Redress Act. Several aspects of this new legislation are analyzed in the article and its findings may indicate that ?adequate? protection, i.e. one of the fundamental requirement under EU law and Privacy Shield program, may in fact not be provided. Another aspect of analysis is related to the change of policy of limiting the priority of national security programs, including electronic surveillance, made by the current US administration, which also may affects UE?US agreements related to data protection area. In the final conclusions, recommendation regarding existing and future cross-border
data flows agreements are formulated.
Bibliografia
Bender D.: The Judicial Redress Act: A Path To Nowhere, http://cli.re/Ger32o.
Cole D.: Are Foreign Nationals Entitled to the Same Constitutional Rights As Citizens?, Thomas Jefferson Law Review 2003, t. 25, s. 367?388.
Fischer B., Karwala D.: Transfer danych osobowych do państw trzecich, Państwo i Prawo 2007, z. 1, s. 100?112.
Garcia M.: International Law and Agreements ? Their Effect upon U.S. Law, Congressional Research Service 2015, http://cli.re/LvbD1M.
Gaziano T.: The Use and Abuse of Executive Orders and Other Presidential Directives, Texas Review of Law & Politics 2000?2001, t. 5, s. 267?303.
Gold A.: Obscured by clouds: the Fourth Amendment and searching cloud storage accounts through locally installed software, William & Mary Law Review 2015, nr 6, s. 2321?2350.
Jagielska M., Kunkiel-Kryńska A.: Wybór prawa jako klauzula abuzywna w umowach konsumenckich zawieranych przez Internet, IKAR 2016, nr 3, s. 29?38.
Jaroszek A.: Ważność wyboru (w:) A. Jaroszek: Prawo właściwe dla umów konsumenckich zawieranych przez Internet, Warszawa 2009.
Johnson E.: Lost in the Cloud: Cloud Storage, Privacy, and Suggestions for Protecting Users? Data, Stanford Law Review 2017, t. 69, s. 867?909.
Kerr O.: The Fourth Amendment in cyberspace: can encryption create a resonable expectation of privacy?, Connecticut Law Review 2001, t. 33, s. 503?533.
Kolasiński M., Świerczyński M.: Wybór prawa obcego w internetowych wzorcach umownych ? obowiązek spojrzenia na ochronę konsumentów z perspektywy prawa prywatnego międzynarodowego (w:) Prawo konsumenckie w praktyce, pod red. M. Czarneckiej, T. Skocznego, Warszawa 2016, s. 19?30.
Krzysztofek M.: Ochrona danych osobowych w Unii Europejskiej po reformie. Komentarz do rozporządzenia Parlamentu Europejskiego i Rady (UE) 2016/679, Warszawa 2016.
Motyka K.: Prawo do prywatności, Zeszyty Naukowe Akademii Podlaskiej w Siedlcach, Seria Administracja i Zarządzanie 2010, nr 85, s. 9?36.
Shaffer G.: Globalization and Social Protection: The Impact of EU and International Rules in the Ratcheting up of U.S. Data Privacy Standards, Yale Journal of International Law 2000, nr 1, s. 1?87.
Solove D.: The Scope and Potential of FTC Data Protection, The George Washington Law Review 2015, nr 6, s. 2230?2300.