The European Parliament has voted against a U.S. adequacy decision under the proposed EU-U.S. Data Privacy Framework.

Why?

  • Bulk collection: The framework still allows for bulk collection of personal data in certain cases and does not make bulk data collection subject to independent prior authorization.
  • Data retention: It does not provide for clear rules on data retention.
  • DPRC: Data Protection Review Court (DPRC) decisions would be secret, violating citizens’ right to access and rectify data about them. At the same time, its decisions could also be dismissed or overruled by the U.S. president (so it’s not really independent).
  • It also won’t stand up in court when challenged.

For additional information, read more here.