Yesterday, the European Parliament voted to approve the EU-U.S. Umbrella Agreement, a framework for the exchange of personal data for law-enforcement (including anti-terrorism) purposes between the EU and U.S. As we previously explained, negotiations on this Agreement have been underway for quite some time, with the European Parliament first calling for it back in March 2009.
According to the European Commission’s fact sheet, the Agreement “puts in place a comprehensive high-level data protection framework for EU-US law enforcement cooperation.” Specifically, the Umbrella Agreement includes the following protections:
- Data Use Limitations
- Onward Transfer Requirements
- Publicly Available Retention Periods
- Access and Rectification Rights
- Data Breach Notification
- Judicial Redress and Enforceability