EU-U.S. Privacy Shield

[DJ-1701]

As I couldn't find a reference to this on here, (although I am sure someone will correct me if I am wrong ), it appears 'The EU-U.S. Privacy Shield' was agreed on in 12th of July 2016, which to my understanding replaces the Safe Habor List/Safe Habour List which was deemed 'invalid' back on the 6th of October 2015.

 

Further information:

 

https://safeharbor.export.gov/list.aspx

The EU-U.S. Privacy Shield - European Commission

https://www.privacyshield.gov/Program-Overview

https://www.privacyshield.gov/list

[unexus]

You may be interested to know that Donald Trump has signed an Executive Order that effectively invalidates the EU-US Privacy Shield Framework.

 

Check out the full article on Tech Crunch... http://tcrn.ch/2jBxnbd

 

Google for one are an active participant of Privacy Shield:- https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

 

This could have serious implications for UK student PII held in GSuite/Google Classroom.

[DJ-1701]

You may be interested to know that Donald Trump has signed an Executive Order that effectively invalidates the EU-US Privacy Shield Framework.

 

Check out the full article on Tech Crunch... http://tcrn.ch/2jBxnbd

 

Google for one are an active participant of Privacy Shield:- https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

 

This could have serious implications for UK student PII held in GSuite/Google Classroom.

 

Oh... drat... thanks for the update @unexus.

 

If anyone elses filter blocks the short URL, the long one can be found here:

https://techcrunch.com/2017/01/26/trump-order-strips-privacy-rights-from-non-u-s-citizens-could-nix-eu-us-data-flows/

[jmak]

As I couldn't find a reference to this on here, (although I am sure someone will correct me if I am wrong ),

 

https://www.edugeek.net/showthread.php?t=179481

 

[DJ-1701]

As I couldn't find a reference to this on here, (although I am sure someone will correct me if I am wrong ),

 

https://www.edugeek.net/showthread.php?t=179481

 

 

Ah, but my first post was in reference to the EU-U.S. Privacy Shield being setup ... though I didn't notice @fiza's post about 'Trump signs 'No Privacy' for non Americans', cheers.

[mikeprice]

Going back to the original title, @unexus has found an article stating the EU-US Privacy Shield Framework is in danager...

 

 

 

If anyone elses filter blocks the short URL, the long one can be found here:

https://techcrunch.com/2017/01/26/trump-order-strips-privacy-rights-from-non-u-s-citizens-could-nix-eu-us-data-flows/

 

so - if we use Google Drive (or others) are we still OK under the DPA as now the privacy is compromised??

[DJ-1701]

so - if we use Google Drive (or others) are we still OK under the DPA as now the privacy is compromised??

 

That, my friend, is the question...

 

I wouldn't let panic sweep yet though, I mean there was a long time that the Safe habour agreement was noted as invalid and you remember what the UK's data watchdog said when someone stated no one could use Dropbox in school because of it... Schools given Dropbox guidance after Safe Harbour warning - BBC News

 

I believe this is something we need to keep an eye on though and see what the Data Watchdog/Information Commissioner's Office (ICO) states.

[localzuk]

Bear in mind that we may also end up scrapping some of our own DPA rules when we leave the EU. We are basically a vassal state of the US, so can't see us putting roadblocks in place between us and them!

[jmak]

I still think that it's a balance of risks that needs to be considered. Is privacy at any greater risk on Google's or Microsoft's servers than ours?

 

Both companies have refused to put in back doors for US law enforcement agencies in the past and neither look like they're going to cosy up to the Trump administration. The data is encrypted at rest and in transit.

 

Not fool proof, but I don't think it's my biggest security concern. We're also covered by the DfE's approval of them as providers.

 

I'm not panicking yet 😀

[mikeprice]

so basically