US and EU negotiators have agreed on changes to the Privacy Shield deal, the new transatlantic data transfer framework.
Under the new deal, companies are required to delete personal data that is no longer used for its intended purpose, and third-party services will find it more difficult to access the data from companies who have signed on to the agreement. EU member states still need to approve the deal, which would take effect in July. However, Privacy Shield is likely to face future challenges in the courts as privacy activists argue that the deal does not go far enough to protect Europeans from US surveillance. The US has asserted that it will only use personal data in special circumstances such as terrorism probes.
Compliments of the Atlantic Council