--- title: Understanding the EU-US Privacy Shield Agreement | SPZ Legal description: The EU-US Privacy Shield, an agreement on data transfer that replaces the Safe Harbor, is centered on surveillance limits, oversight, and enforcement. image: https://spzlegal.com/hubfs/shield-1086703_1280.png --- [Skip To Content](https://spzlegal.com/blog/data-privacy/eu-us-privacy-shield#main-content) [![spz-legal-logo-2024](https://spzlegal.com/hubfs/logos/spz-legal-logo-2024.svg)](https://spzlegal.com/) - [Clients](https://spzlegal.com/our-clients) - [Featured Clients](https://spzlegal.com/our-clients) - [Case Study: Verto Education](https://spzlegal.com/verto-case-study) - [Case Study: Kong Studios](https://spzlegal.com/kong-studios-case-study) - [Case Study: WindBorne](https://spzlegal.com/windborne-case-study) - [Case Study: Tango](https://spzlegal.com/tango-case-study) - [Case Study: Sown To Grow](https://spzlegal.com/sown-to-grow-case-study) - [Case Study: Capture6](https://spzlegal.com/capture6-case-study) - [Case Study: Datava](https://spzlegal.com/datava-case-study) - [Case Study: Voxel](https://spzlegal.com/from-scrappy-startup-to-selling-to-fortune-100) - [Team](https://spzlegal.com/team) - [About Us](https://spzlegal.com/team) - [Becky Mancero](https://spzlegal.com/team/becky-mancero) - [David De La Flor](https://spzlegal.com/team/david-de-la-flor) - [Elizabeth Thorne](https://spzlegal.com/team/elizabeth-thorne) - [Gea Kang](https://spzlegal.com/team/gea-kang) - [Hannah Porter](https://spzlegal.com/team/hannah-porter) - [Hash Zahed](https://spzlegal.com/team/hash-zahed) - [Jessica Sulahian](https://spzlegal.com/team/jessica-sulahian) - [Morgan Kasenchak](https://spzlegal.com/team/morgan-kasenchak) - [Paige Southworth](https://spzlegal.com/paige-southworth) - [Ryan Shaening Pokrasso](https://spzlegal.com/team/ryan-shaening-pokrasso) - [Sam Taylor](https://spzlegal.com/team/sam-taylor) - [Tami Gore](https://spzlegal.com/team/tami-gore) - [Specialists](https://spzlegal.com/our-partners) - [Services](https://spzlegal.com/business-law-services) - [Formation & Corporate](https://spzlegal.com/business-law-services/formation) - [Mergers & Acquisitions](https://spzlegal.com/business-law-services/mergers-acquisitions) - [Funding](https://spzlegal.com/business-law-services/funding) - [Hiring & Equity Compensation](https://spzlegal.com/business-law-services/employment) - [Data Privacy](https://spzlegal.com/business-law-services/data-privacy) - [IP Protection](https://spzlegal.com/business-law-services/ip-protection) - [Commercial Agreements](https://spzlegal.com/business-law-services/sales-agreements) - [Startup Center](https://spzlegal.com/startup-center) - [Formation & Corporate](https://spzlegal.com/startup-center/formation-and-corporate-topics) - [Mergers & Acquisitions](https://spzlegal.com/startup-center/mergers-and-acquisitions) - [Funding](https://spzlegal.com/startup-center/funding) - [Hiring & Equity Compensation](https://spzlegal.com/startup-center/hiring) - [IP Protection](https://spzlegal.com/startup-center/ip-protection) - [Data Privacy](https://spzlegal.com/startup-center/data-privacy) - [Commercial Agreements](https://spzlegal.com/startup-center/commercial-agreements) - [Blog](https://spzlegal.com/blog) - [Contact](https://spzlegal.com/contact) - [LinkedIn](https://www.linkedin.com/company/spz-legal) # Update: EU-US Privacy Shield [Data Privacy](https://spzlegal.com/blog/tag/data-privacy) ![](https://spzlegal.com/hs-fs/hubfs/shield-1086703_1280.png?width=760&height=428&name=shield-1086703_1280.png) After four months of frantic negotiations, the U.S. and the European Union have a new deal on cross-border data transfer. The agreement, dubbed the "Privacy Shield," replaces the Safe Harbor Framework, a bilateral agreement governing transfer of personal information that was [struck down](https://spzlegal.com/blog/data-privacy/ecj-strikes-down-us-eu-safe-harbor) by the European Court of Justice in October of last year. News of the detente was greeted with a mixture of skepticism and relieved adulation, tempered with a dash of confusion. What do you need to know about Privacy Shield?  UPDATE: Since this article was drafted, Privacy Shield has been formally adopted and is now in effect. Please see [this article](https://spzlegal.com/blog/data-privacy/eu-us-privacy-shield-now-effect) for more information. ## What’s Different About the Privacy Shield? First thing to note is that details on the nascent Privacy Shield are scant, as the deal has yet to be approved and adopted (see below). But here’s what we know the Privacy Shield will encompass: - **Surveillance Restrictions:** According to the European Commission, the U.S. has provided “written assurances that the access of public authorities for law enforcement and national security will be subject to clear limitations, safeguards, and oversight mechanisms.” If that sounds a tad vague to you, you’re in good company. The Commission has provided little in the way of specifics as to these safeguards. All we know is that, under Privacy Shield, the office of the director of national intelligence will certify that the U.S. will not perpetrate "[indiscriminate mass surveillance](https://www.cnbc.com/2016/02/03/what-you-need-to-know-about-eu-us-data-sharing-pact-called-privacy-shield.html)" on Europeans’ personal data transferred Stateside. The Commission, in conjunction with the U.S. Department of commerce, will [monitor the agreement annually](https://www.bbc.com/news/technology-35471851) to ensure adherence. - **Complaint Resolutions:** Under Privacy Shield, EU citizens who feel their data is being misused have [a variety of options](https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint). They can make individual complaints, and European Data Protection Authorities can refer such complaints to the Department of Commerce and the Federal Trade Commission. Companies will be required to respond within a strict timeframe. If the issue remains unresolved, alternative dispute resolution will be provided at no cost. Under the agreement, an ombudsman will also be installed at the Department of Commerce to handle questions involving access by national security agencies. - **Strengthened Protections:** Companies handling European data will be subject to increased scrutiny from regulators on both sides of the Atlantic. Acceding organizations [“will need to commit to robust obligations,”](https://europa.eu/rapid/press-release_IP-16-216_en.htm) which they will publish for inspection by the FTC. While the full list of details has not yet been made public, [chances are stringent privacy commitments are in the offing](https://www.natlawreview.com/article/new-us-eu-privacy-shield-will-impose-heightened-compliance-obligations-us-companies). ## What Can I Do To Comply With the Privacy Shield? Wait and see. Privacy Shield faces a long road to approval and adoption, with legal challenges from privacy activists and EU regulators waiting in the wings. The details of corporate obligations are too thin at the moment to provide concrete guidance on specific subjects. However, it is never too early to ensure your company is following best practices in the privacy arena. Here are a couple of important steps: - **Make your company safe:** Data privacy is the definitive issue of the modern marketplace. Make sure your company handles issues such as [personally identifiable information](https://spzlegal.com/blog/data-privacy/personally-identifiable-information), [privacy policies](https://spzlegal.com/blog/privacy/drafting-privacy-policy) and [legal enforcement](https://spzlegal.com/blog/data-privacy/ftc-data-privacy-enforcement) with the utmost care and sophistication. - **Read up...and get ready:** You should familiarize yourself with [the EU’s position on individual privacy and the handling of data](https://www.echr.coe.int/Documents/Handbook_data_protection_ENG.pdf). This type of knowledge will come in handy when the full details of Privacy Shield are released. For more information on Privacy Shield and any other privacy-related matter, [contact us](https://spzlegal.com/contact). --- *DISCLAIMER: The information in this article is provided for informational purposes only and should not be construed or relied upon as legal advice. This article may constitute attorney advertising under applicable state laws.* [![spz-legal-logo-2024](https://spzlegal.com/hubfs/logos/spz-legal-logo-2024.svg)](https://spzlegal.com/) Categories - [Funding](https://spzlegal.com/blog/tag/funding) - [Incorporation](https://spzlegal.com/blog/tag/incorporation) - [Employment](https://spzlegal.com/blog/tag/employment) - [Contracts](https://spzlegal.com/blog/tag/contracts) - [Data Privacy](https://spzlegal.com/blog/tag/data-privacy) - [M&A](https://spzlegal.com/blog/tag/ma) - [Firm Culture](https://spzlegal.com/blog/tag/firm-culture) - [News](https://spzlegal.com/blog/tag/news) - [Social Enterprise](https://spzlegal.com/blog/tag/social-enterprise) - [Acquired](https://spzlegal.com/blog/tag/acquired) - [Intellectual Property](https://spzlegal.com/blog/tag/intellectual-property) - [Client Engagement](https://spzlegal.com/blog/tag/client-engagement) - [Nonprofit](https://spzlegal.com/blog/tag/nonprofit) - [AI](https://spzlegal.com/blog/tag/ai) - [Artificial Intelligence](https://spzlegal.com/blog/tag/artificial-intelligence) Recent Posts - [Becky Mancero Recognized by Best Lawyers: Ones to Watch for Second Consecutive Year](https://spzlegal.com/blog/becky-mancero-best-lawyers-ones-to-watch-2026) - [What We Fix in Diligence Over and Over Again Before a Financing or Exit](https://spzlegal.com/blog/startup-legal-issues-before-financing-exit) - [Becky Mancero on the Melissa Widner Podcast: Cap Tables, Equity Mistakes, and AI in the Legal World](https://spzlegal.com/blog/becky-mancero-on-the-melissa-widner-podcast-cap-tables-equity-mistakes-ai-in-the-legal-world) - [Spinning Out a Product Into a New Startup: Legal Issues Founders Need to Solve Early](https://spzlegal.com/blog/spinning-out-product-new-startup-legal-guide) - [Converting an LLC to a Corporation: When It Makes Sense and How to Do It Without Creating a Mess](https://spzlegal.com/blog/converting-llc-to-corporation-startup-guide) - [The Role of LOIs in M&As: Structuring Letters of Intent](https://spzlegal.com/blog/the-role-of-lois-in-mas-structuring-letters-of-intent) - [Exit Structures: Mergers, Acquisitions, & Tax Treatment](https://spzlegal.com/blog/exit-structures-mergers-acquisitions-tax-treatment) - [Due Diligence Best Practices: Be Prepared for M&A Success](https://spzlegal.com/blog/due-diligence-best-practices-be-prepared-for-ma-success) Locations **San Francisco Bay Area, California** **Milwaukee, Wisconsin** **Los Angeles, California** **Denver, Colorado** **Miami, Florida** **Austin, Texas** Contact Us [Email](https://spzlegal.com/contact) Follow Us - [LinkedIn](https://www.linkedin.com/company/spz-legal) Startup Topics - [Formation](https://spzlegal.com/blog/tag/incorporation) - [Funding](https://spzlegal.com/blog/tag/funding) - [Employment](https://spzlegal.com/blog/tag/employment) - [Intellectual Property](https://spzlegal.com/blog/tag/intellectual-property) - [Data Privacy](https://spzlegal.com/blog/tag/data-privacy) - [Commercial Agreements](https://spzlegal.com/blog/tag/contracts) - [M&A Law](https://spzlegal.com/blog/tag/ma) © 2026 [SPZ Legal, P.C. Startup Lawyers](https://spzlegal.com/) - [Terms of Use](https://spzlegal.com/terms) - [Privacy Policy](https://spzlegal.com/privacy) [![California Chambers Spotlight 2025 Award](https://spzlegal.com/hs-fs/hubfs/ca-chamber-spotlight-2025-badge.jpg?width=300&height=300&name=ca-chamber-spotlight-2025-badge.jpg)](https://chambers.com/law-firm/spz-legal-p-c-120:23727975) DISCLAIMER: The information on this website is provided for informational purposes only and may not be updated over time. Nothing on this website should be construed as legal advice or relied upon in any way. No attorney-client relationship is intended to be created through this website. This website may be considered attorney advertising in some states. Prior results do not guarantee a similar outcome. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Aaron Murphy", "url" : "https://spzlegal.com/blog/author/aaron" }, "dateModified" : "2026-05-26T20:10:58.658Z", "datePublished" : "2019-02-05T07:39:58.000Z", "headline" : "Understanding the EU-US Privacy Shield Agreement | SPZ Legal", "image" : [ "https://spzlegal.com/hubfs/shield-1086703_1280.png" ], "mainEntityOfPage" : { "@id" : "https://spzlegal.com/blog/data-privacy/eu-us-privacy-shield", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://spzlegal.com/hubfs/logos/spz-legal-logo-2024.svg" } } } ```