Hi there,

The announcement carried very little information about the framework, except that it was merely agreed on "in principle." Experts like Max Schrems haven't held back their frustration: 

“It is regrettable that the EU and US have not used this situation to come to a 'no spy' agreement, with baseline guarantees among like-minded democracies. Customers and businesses face more years of legal uncertainty.”

For a full breakdown of the Trans-Atlantic Data Privacy Agreement announcement, read our article "What You Need To Know About The New Trans-Atlantic Data Privacy Framework."

The good news is that U.S. companies don’t need to wait another two or more years to see where things settle. Customers are looking for software companies to provide assurances now, not when the stars align and the U.S. and EU finally agree.

We put together a resource page on Technical Measures For Schrems II & FAQ that addresses the core issue: how US companies can continue operating in Europe when they handle EU personal data. Technical solutions bypass the constantly shifting data protection agreements and make it possible for US software companies to comply with EU privacy laws. 

If you're looking for more information about encryption and Trans-Atlantic data flows, check out our other resources

We live in interesting times. Privacy in the digital age is a concept that is very much in flux, and the standards of data security are also shifting. The old ways of building applications and handling sensitive data begin to look naive and outmoded.

If you'd like to talk more about the turbulence, the gray areas in the law, or other aspects of these issues, just hit reply and let's chat.

Until next month,

Patrick Walsh
CEO, IronCore 

Join the IronCore Labs community on Discord.