US government statement on initialing of 'umbrella' Data Privacy and Protection Agreement (DPPA)

In a landmark step for transatlantic co-operation, on 10 September the US and EU initialed the 'umbrella' Data Privacy and Protection Agreement (DPPA), after four years of negotiation.  The agreement will protect both the security and the privacy of citizens on both sides of the Atlantic, by setting out protections for personal information that is passed between the United States and European Union member states for the purpose of preventing, investigating or prosecuting crimes, including terrorism.

The agreement covers such issues as the proper use, security, and retention of data, as well as access to that data. As an 'umbrella' agreement, the DPPA will supplement the already strong privacy provisions in existing agreements and treaties between the United States and Europe that authorize law enforcement sharing, but will not require their renegotiation.

As part of this agreement, the Administration has asked Congress to grant European Union citizens the same rights as Americans have with respect to relevant aspects of the Privacy Act, so that there will be parity with the rights that Americans currently have in Europe concerning their data when it is stored there.

The agreement will enhance the ability of law enforcement and prosecutorial agencies in the United States and Europe to cooperate with each other to combat crime and terrorism, while at the same time protecting personal privacy.

Share this article: