• Mehr als 3 Millionen Wörter Inhalt
  • |
  • info@itmedialaw.com
  • |
  • Tel: 03322 5078053
Rechtsanwalt Marian Härtel - ITMediaLaw

No products in the cart.

  • en English
  • de Deutsch
  • Informationen
    • Ideal partner
    • About lawyer Marian Härtel
    • Quick and flexible access
    • Principles as a lawyer
    • Why a lawyer and business consultant?
    • Focus areas of attorney Marian Härtel
      • Focus on start-ups
      • Investment advice
      • Corporate law
      • Cryptocurrencies, Blockchain and Games
      • AI and SaaS
      • Streamers and influencers
      • Games and esports law
      • IT/IP Law
      • Law firm for GMBH,UG, GbR
      • Law firm for IT/IP and media law
    • The everyday life of an IT lawyer
    • How can I help clients?
    • Testimonials
    • Team: Saskia Härtel – WHO AM I?
    • Agile and lean law firm
    • Price overview
    • Various information
      • Terms
      • Privacy policy
      • Imprint
  • Services
    • Support and advice of agencies
    • Contract review and preparation
    • Games law consulting
    • Consulting for influencers and streamers
    • Advice in e-commerce
    • DLT and Blockchain consulting
    • Legal advice in corporate law: from incorporation to structuring
    • Legal compliance and expert opinions
    • Outsourcing – for companies or law firms
    • Booking as speaker
  • News
    • Gloss / Opinion
    • Law on the Internet
    • Online retail
    • Law and computer games
    • Law and Esport
    • Blockchain and web law
    • Data protection Law
    • Copyright
    • Labour law
    • Competition law
    • Corporate
    • EU law
    • Law on the protection of minors
    • Tax
    • Other
    • Internally
  • Podcast
    • ITMediaLaw Podcast
  • Knowledge base
  • Videos
    • Information videos – about Marian Härtel
    • Videos – about me (Couch)
    • Blogpost – individual videos
    • Videos on services
    • Shorts
    • Podcast format
    • Third-party videos
    • Other videos
  • Contact
Kurzberatung
  • Informationen
    • Ideal partner
    • About lawyer Marian Härtel
    • Quick and flexible access
    • Principles as a lawyer
    • Why a lawyer and business consultant?
    • Focus areas of attorney Marian Härtel
      • Focus on start-ups
      • Investment advice
      • Corporate law
      • Cryptocurrencies, Blockchain and Games
      • AI and SaaS
      • Streamers and influencers
      • Games and esports law
      • IT/IP Law
      • Law firm for GMBH,UG, GbR
      • Law firm for IT/IP and media law
    • The everyday life of an IT lawyer
    • How can I help clients?
    • Testimonials
    • Team: Saskia Härtel – WHO AM I?
    • Agile and lean law firm
    • Price overview
    • Various information
      • Terms
      • Privacy policy
      • Imprint
  • Services
    • Support and advice of agencies
    • Contract review and preparation
    • Games law consulting
    • Consulting for influencers and streamers
    • Advice in e-commerce
    • DLT and Blockchain consulting
    • Legal advice in corporate law: from incorporation to structuring
    • Legal compliance and expert opinions
    • Outsourcing – for companies or law firms
    • Booking as speaker
  • News
    • Gloss / Opinion
    • Law on the Internet
    • Online retail
    • Law and computer games
    • Law and Esport
    • Blockchain and web law
    • Data protection Law
    • Copyright
    • Labour law
    • Competition law
    • Corporate
    • EU law
    • Law on the protection of minors
    • Tax
    • Other
    • Internally
  • Podcast
    • ITMediaLaw Podcast
  • Knowledge base
  • Videos
    • Information videos – about Marian Härtel
    • Videos – about me (Couch)
    • Blogpost – individual videos
    • Videos on services
    • Shorts
    • Podcast format
    • Third-party videos
    • Other videos
  • Contact
Rechtsanwalt Marian Härtel - ITMediaLaw

Is a new Privacy Shield coming in 2023?

2. January 2023
in Data protection Law
Reading Time: 4 mins read
0 0
A A
0
eu kommission beendet defizitverfahren gegen portugal und kroatien article full
Key Facts
  • The European Commission initiated a new adequacy decision on 13.12.2022.
  • The decision could promote the transatlantic transfer of data between the EU and the USA.
  • The new framework could enable companies to transfer personal data from the EU to the USA.
  • Previous regulations, such as the Privacy Shield, were blocked by the Schrems II ruling.
  • US companies must register with the FTC to participate in the new framework.
  • The European Court of Justice emphasizes that effective data protection measures are required, not necessarily equivalent standards.
  • The final version of the resolution could still be subject to legal challenges.

Will the European Commission’s new adequacy decision finally promote transatlantic data transfers between the U.S. and the EU?

Content Hide
1. What is an adequacy decision?
2. Data transfer to the US possible again soon?
2.1. Author: Marian Härtel

On 13/12/2022, the European Commission initiated a procedure for its adoption. In doing so, it relies on the decree issued by U.S. President Biden and the regulations issued by U.S. Attorney General Garland. After the EU-US Privacy Shield was declared invalid by the Schrems II ruling, the transfer of personal data from the EU to the USA has not been clearly regulated and has become significantly more difficult. The new decision could thus represent the third chance for regulated data flows. The draft has already been submitted to the European Data Protection Committee (EDSA) and must still be confirmed by the EU member states. Can we look forward to a change that will be liberating and more secure for all sides?

What is an adequacy decision?

The Commission has the possibility to determine the existence of an adequate level of protection in a given third country after appropriate examination. The determination may also be limited to a specific area or sector in the third country, or even to specific categories of data. An adequate level of protection exists where the third country, on the basis of its domestic law and its application of that law, the existence and effective functioning of one or more independent supervisory authorities, and its international commitments, has a level of protection equivalent to that afforded by the General Data Protection Regulation.

A data transfer based on such an adequacy decision does not require any further approval by the national supervisory authority responsible for the controller or processor. The other requirements of the General Data Protection Regulation regarding the permissibility of data processing apply independently (“two-step test”).

The General Data Protection Regulation provides for the continued application of adequacy decisions already issued (Art. 46 (5) sentence 2 DS-GVO). Such exist for the following countries:

  • Andorra
  • Argentina
  • Faroe Islands
  • Guernsey
  • Israel
  • Isle of Man
  • Japan
  • Jersey
  • Canada (for commercial organizations only)
  • New Zealand
  • Republic of Korea (South Korea)
  • Switzerland
  • Uruguay
  • United Kingdom

Data transfer to the US possible again soon?

Especially for IT companies like SaaS providers, a constant problem is that a transfer of user data to the USA, according to Shrems II is very difficult. It is therefore quite a hopeful moment that after almost a year of intense negotiations, the EU Commission has published the proposal for a new adequacy decision: 134 pages full of opportunity to give an adequate level of protection to U.S. data protection law under Article 45 GDPR. If the decision comes into force in the coming months, companies and organizations will be able to link up with the so-called EU-US Data Privacy Framework and transfer personal data from the EU to the USA.

The European Court of Justice (ECJ) has ruled that such a decision does not necessarily require functionally equivalent data protection to the EU level, but that data protection must be effectively implemented. This, in turn, the U.S. could not guarantee, for example, through the Foreign Surveillance Act. It is questionable, of course, whether President Joe Biden’s Executive Order 14086, can change that. U.S. services are to ensure in the future that their data collections are “necessary and proportionate” and that they are better controlled in their data collections.

Otherwise, the new Privacy Shield is expected to function similarly to the old one. Again, no automatism provided. U.S. companies that want to slip under the EU-U.S. Data Privacy Framework must register with the trade regulator FTC and accept the associated obligations.

Of course, it remains to be seen how a final version of the decision will read…and in corporate planning, it should then also be noted that there will certainly be lawsuits against a new adequacy decision as well.

Marian Härtel
Author: Marian Härtel

Marian Härtel ist Rechtsanwalt und Fachanwalt für IT-Recht mit einer über 25-jährigen Erfahrung als Unternehmer und Berater in den Bereichen Games, E-Sport, Blockchain, SaaS und Künstliche Intelligenz. Seine Beratungsschwerpunkte umfassen neben dem IT-Recht insbesondere das Urheberrecht, Medienrecht sowie Wettbewerbsrecht. Er betreut schwerpunktmäßig Start-ups, Agenturen und Influencer, die er in strategischen Fragen, komplexen Vertragsangelegenheiten sowie bei Investitionsprojekten begleitet. Dabei zeichnet sich seine Beratung durch einen interdisziplinären Ansatz aus, der juristische Expertise und langjährige unternehmerische Erfahrung miteinander verbindet. Ziel seiner Tätigkeit ist stets, Mandanten praxisorientierte Lösungen anzubieten und rechtlich fundierte Unterstützung bei der Umsetzung innovativer Geschäftsmodelle zu gewährleisten.

Tags: Data protection LawGeneral Data Protection RegulationLawsuitPersonal dataPrivacyRegulationSaasSicherheit

Weitere spannende Blogposts

BGH with exciting decision in the area of tension of the imprint duty

Social media accounts and imprint
12. September 2023

Introduction The digital world is an ever-changing playing field where influencers and streamers play an increasingly important role. In the...

Read moreDetails

Cybersecurity tightening in 2025

Cybersecurity tightening in 2025
10. October 2024

As an IT lawyer with many years of experience in advising technology start-ups and SaaS companies, I would like to...

Read moreDetails

BGH will decide on the reimbursement of bets

Lottery brokerage/gambling/betting on the Internet without permission?
17. May 2024

It's about time. The First Civil Senate of the Federal Court of Justice has to decide whether a sports betting...

Read moreDetails

ECJ overturns Privacy Shield: review contracts!

District Court Frankfurt a.M. on the right to be forgotten
7. November 2022

The General Data Protection Regulation(GDPR) stipulates that personal data may in principle only be transferred to a third country if...

Read moreDetails

OLG Cologne on the surrender of cryptocurrencies

Startup financing through tokenized profit participation rights and related financing options.
13. August 2024

In a recent decision (11 W 15/24), the Cologne Higher Regional Court clarified that a debtor must exhaust all technically...

Read moreDetails

Laser tag endangering young people? Administrative court decides

Laser tag endangering young people? Administrative court decides
21. March 2019

Is Lasertag a sport/recreational event that endangers young people? This is at least as controversial a question as the question...

Read moreDetails

Default “Yes” to cookies invalid!

Default “Yes” to cookies invalid!
7. November 2022

There could soon be a ruling by the European Court of Justice that could startle German website providers who have...

Read moreDetails

Defend yourself against IGD warnings?

LG Munich: Data protection consent on dating platform
7. November 2022

Actually, the behaviors when you receive a warning under competition law are always the same. A summary can be found...

Read moreDetails

Cheating in esport: Can I monitor employees?

Cheating in esport: Can I monitor employees?
6. December 2019

For numerous reasons, the topic of cheating in esports is currently very hot and controversial. But can I actually track...

Read moreDetails
GDPR: Download pairing with newsletter/registration?

Data protection Law

25. June 2023

Data protection law is a field of law dealing with the protection of personal data and the regulation of the...

Read moreDetails
797ad65d 981a 42b3 a370 b11106ec986a 20210986

Accelerator program

29. March 2025
Telecommunications Act (TKG)

Telecommunications Act (TKG)

27. June 2023
Dark Patterns

Dark Patterns

16. October 2024

Memorandum / Articles of Association

24. June 2023

Podcast Folgen

Legal challenges in the gaming universe: A guide for developers, esports professionals and gamers

What will 2025 bring for start-ups in legal terms? Opportunities? Risks?

24. January 2025

In this exciting episode of the itmedialaw podcast, we take a deep dive into the legal developments that will shape...

75df8eaa33cd7d3975a96b022c65c6e4

Life as an IT lawyer, work-life balance, family and my career

26. September 2024

In this captivating episode of my IT Medialaw podcast, I, Marian Härtel, share my personal journey as a passionate IT...

4f3597d5481e0f38e37bf80eaad208c7

The IT Media Law Podcast. Episode No. 1: What is this actually about?

26. August 2024

Yeah, the first real episode with myself! In this podcast, we dive into the exciting world of IT law and...

3c671c5134443338a4e0c30412ac3270

“Digital law decoded” with lawyer Marian Härtel

26. September 2024

In this exciting 30-minute podcast, lawyer Marian Härtel decodes the complex world of digital law for the self-employed, start-ups and...

  • Privacy policy
  • Imprint
  • Contact
  • About lawyer Marian Härtel
Marian Härtel, Rathenaustr. 58a, 14612 Falkensee, info@itmedialaw.com

Marian Härtel - Rechtsanwalt für IT-Recht, Medienrecht und Startups, mit einem Fokus auf innovative Geschäftsmodelle, Games, KI und Finanzierungsberatung.

Welcome Back!

Login to your account below

Forgotten Password? Sign Up

Create New Account!

Fill the forms below to register

All fields are required. Log In

Retrieve your password

Please enter your username or email address to reset your password.

Log In
  • Informationen
    • Ideal partner
    • About lawyer Marian Härtel
    • Quick and flexible access
    • Principles as a lawyer
    • Why a lawyer and business consultant?
    • Focus areas of attorney Marian Härtel
      • Focus on start-ups
      • Investment advice
      • Corporate law
      • Cryptocurrencies, Blockchain and Games
      • AI and SaaS
      • Streamers and influencers
      • Games and esports law
      • IT/IP Law
      • Law firm for GMBH,UG, GbR
      • Law firm for IT/IP and media law
    • The everyday life of an IT lawyer
    • How can I help clients?
    • Testimonials
    • Team: Saskia Härtel – WHO AM I?
    • Agile and lean law firm
    • Price overview
    • Various information
      • Terms
      • Privacy policy
      • Imprint
  • Services
    • Support and advice of agencies
    • Contract review and preparation
    • Games law consulting
    • Consulting for influencers and streamers
    • Advice in e-commerce
    • DLT and Blockchain consulting
    • Legal advice in corporate law: from incorporation to structuring
    • Legal compliance and expert opinions
    • Outsourcing – for companies or law firms
    • Booking as speaker
  • News
    • Gloss / Opinion
    • Law on the Internet
    • Online retail
    • Law and computer games
    • Law and Esport
    • Blockchain and web law
    • Data protection Law
    • Copyright
    • Labour law
    • Competition law
    • Corporate
    • EU law
    • Law on the protection of minors
    • Tax
    • Other
    • Internally
  • Podcast
    • ITMediaLaw Podcast
  • Knowledge base
  • Videos
    • Information videos – about Marian Härtel
    • Videos – about me (Couch)
    • Blogpost – individual videos
    • Videos on services
    • Shorts
    • Podcast format
    • Third-party videos
    • Other videos
  • Contact
  • en English
  • de Deutsch
Kostenlose Kurzberatung