US intelligence does not conduct mass, indiscriminate harvesting of foreigners’ private data, a senior US official has said on the eve of a landmark EU court ruling that will affect thousands of companies including the likes of Facebook.
Robert Litt, legal adviser to the Director of National Intelligence, firmly rebutted allegations that a USsurveillance programme known as Prism, revealed in 2013, allows authorities to hoover up such information on a vast scale.
“Prism is focused and reasonable. It does not involve ‘mass’ and ‘unrestricted’ collection of data,” Litt wrote in the Financial Times, referring to the programme whose existence was leaked in 2013 by former National Security Agency contractor Edward Snowden.
Snowden’s revelations prompted an Austrian student, Max Schrems, to challenge Facebook’s transfers of European users’ data to its US servers because of the risk of US snooping. As Facebook has its European headquarters in Ireland, he filed his complaint to the Irish Data Protection Commissioner.
The case has found its way to the European Court of Justice (ECJ), which will rule on Tuesday on the validity of the entire legal framework, known as Safe Harbour, that allows more than 4,000 companies, from social media groups to airlines, to transfer data from the European Union to the United States.
Without Safe Harbour, such transfers would be forbidden, or only allowed via costlier and more time-consuming means, under EU laws that prohibit data-sharing with countries deemed to have lower privacy standards, of which the United States is one.
Separately from Schrems’ case, the European Commission has been talking to Washington for the past two years about reviewing the 15-year-old Safe Harbour to address its own concerns.
Those efforts could prove to be fruitless if the ECJ follows the reasoning of one of its top advisers, who said two weeks ago that Safe Harbour ought to have been scrapped.
Officials are waiting to see how much wiggle room the ECJ decision will leave them to come out with a strengthened framework, or if they will have to resort to other mechanisms to ensure companies can continue to transfer data.
The Commission will give a news conference at 1500 CET (1300 GMT) on Tuesday in reaction to the ruling.