The privacy landscape is moving fast these days, and increasingly so. That's why we're dedicating the following weeks fully to privacy here at Inspiring Legal. Stine Tornmark will take you through what you need to know and what's on the horizon for digital privacy.
Get insights, learn from peers, life lessons from some of the most influential GCs. If it's related to inhouse legal, we cover it. For more inspiration, go to openli.com/community.
My name is Stine and I am a CEO and co-founder of Openli. But what I'm also is a passionate person when it comes to privacy. I strongly believe that privacy is a fundamental human right. And it's not to put myself on a pedestal, but it's just to say my life.
It's as much online as it is offline. That's just the name of the game today. With chat DBT and what's going on now with AI, well, that's only going to increase. So in this little episode, I'm going to be talking about data.
I'm going to be talking about transferring data from the EU to the US. It doesn't sound super interesting, but I'm sorry to say it's impacting you and your life every single day.
You might not be on Facebook, you might not use Google, but you will most likely either use Instagram, you might use Apple. Well, they're all US-based companies. So when I'm talking about data and I'm talking about data transfers, I'm talking about your everyday life because American tech companies are de facto in our lives and that isn't necessarily a bad thing, but take a step back. What is it that I'm really talking about?
Well, in the EU, we have GDPR, right? We see it as a fundamental human right. The right for you to own your data. In the US, up until now, the focus has been very much about the companies owning data.
We're seeing more legislation coming from the US, for example, in California with the CCPA, but we don't have the same standards yet anyway. What we're also seeing is a very strong intelligence agency in the US that have far-reaching rights to access your data, to use it in whatever way that they deem appropriate or not appropriate, but for whatever means they want the data.
So therefore, there has been a lot of decisions over the last couple of years with Strems II, if you've heard about that, the privacy shield falling apart,and all due to the fact that the US didn't provide the same level of protection. So what we then got was a period of time where everybody was running around and not knowing what to do.
Then we got the SECs, that's the transfer mechanism enabling businesses to send data between the EU and the US, but that in itself isn't enough. You need to have additional safety measures. You need to make sure that your data is safe.
So many kind of thought, okay, let's try and see if we can figure that one out. Not easy in any way. And I'm not promoting the only service, but that is a part of what it is that we're doing, trying to really help with that transfers element, as many of the things we're doing.
But what we then saw is Google Analytics getting in trouble. It started in Austria. And what happened was that the Austrian data protection authorities found that there wasn't additional, the safety wasn't good enough. Transfers of data was happening, IP addresses and so forth in clear text.
Big issue. Therefore, they kind of like said, Google Analytics violating GDPR, therefore, you can't use it. We then saw that the EU was also doing a lot of things that were not you can't use it.
We then saw that spreading out. Moving to Italy, moving to France, moving to Denmark and the EDPB, that's the European Data Protection Board, issued a statement saying, this is an issue. So everybody started looking at, okay, I need to change.
I need to find an alternative to Google Analytics. That's an episode we could take kind of like on its own, I know, but let's just focus on the transfers for today. So everybody, I think many were thinking, okay, we'll get a solution from the politicians.
They will figure out a way for us to send data. They will create a framework and we're still waiting for that because the Biden administration came out not that long ago and saying, well, we're getting closer. We're going to get some kind of transfer in place. What Mark Schrems did, and that's the Austrian data protection, let's call it,
I don't know what to call him. He is not an activist, but he's also, they're kind of like a non-profit organization enforcing GDPR and privacy rights. Well, he kind of came out and said, well, that's going to be lipstick on a pig.
Meaning, don't expect this to solve anything anytime soon. So everybody kind of like still hope and anticipate that we might be seeing some kind of change with the authorities in Europe and the US coming into some kind of agreement.
Yeah, well, then comes meta, meaning Facebook. For many years, it's been the Irish regulators that have been responsible for enforcing privacy when it comes to Facebook because Facebook has their
European headquarters, if we can call that, in Ireland. So many have been talking back and forth about the Irish data protection agency not being that enforceful. And I'm not trying to do any kind of conspiracy.
I'm not saying that whether or not they're good, but given the fact that the Irish have a lot of tech companies, at least the Irish data protection agency has a lot of things they should be looking for.
So what happened was that the European data protection board, which is composed of data protection regulators from each member state in Europe, they get together on a regular basis and they figure out on a European level, because it's one law, right?
It's the GDPR applied to the entire Europe. They figure out what they think in different areas. And they have now issued a statement when it comes to Facebook. So what did they say?
Well, we don't know exactly because they haven't made that statement public, like the decision, but they made a statement. And what they said was the Irish regulators have one month, one month to get things going when it comes to Facebook.
And it is anticipated that there will be a ban of transfers between the EU and the US in regards to Meta Facebook. In that regard, I can mention that Facebook has been going out publicly and warning if there will be such a ban. They might be forced to close down Facebook in Europe.
Boom. So when I'm talking about Facebook and I'm talking about transfers, I am talking about potentially far reaching implications. Imagine Facebook closed in Europe, closed up. Because of transfers. So if you're sitting there and thinking, why is she talking about those bloody transfers? I'm talking about you not having access to Facebook and you might be sitting there and thinking, OK, I don't really use Facebook.
I might be using Messenger, but I don't really use Facebook. I don't really use Facebook. I don't really use Messenger. I don't really use Facebook. I might be using Messenger, but so what? Do you think WhatsApp is much different? Do you think Instagram is much different? Do you think LinkedIn is much different? And what about TikTok? Imagine your kids not being on TikTok anymore. Kind of like almost a pleasant thought in my opinion. That's different, right? YouTube. Pick one. So. By mid-May.
We might be looking into a different future. And don't forget, we have AI and chat GBT rolling out like with a trillion kilometers an hour. And that being banned in Italy. And to put a little sparkle on that cake, the EDPB, that was the European Data Protection Board, have also now decided to put a task force in place to look into chat GBT and open AI.
Meaning we might be looking at a similar decision. So talk about the privacy landscape and the ever-changing landscape for you to be on top of. So that's why I'm kind of contemplating on whether or not we should do a few episodes talking a little bit about what's coming.
How our lives might be changing in ways that hasn't been seen since the Industrial Revolution. And I'm not trying to scare you off. I'm not trying to be overly kind of drama queen kind of. But we are talking about some of the biggest changing elements to your lives. Going on right now.
You're living it. And what is the real truth? Is that data is at the center. Your data, my data, your children's data, your parents' data. Privacy is that de facto standard that will help us sail through those waters that are going to be having waves. It's not going to be calm. So we're in for a ride.
And that's why these next episodes will be dedicated to exactly that. Inspiring us all, but also helping us navigate the privacy waters in front of us.
So stay tuned and have a wonderful day.
Thank you so much for listening to Inspiring Legal. Remember to subscribe and if you want more information, you can always go to openli.com/community.
