[Interview] Europe’s Data Chief on Sharing Info with US: ‘The Concerns Are Really Big’

Why It Matters

The statements underscore growing tension between EU privacy standards and external security agreements, potentially reshaping cross‑border data flows and affecting NGOs operating in conflict zones.

Key Takeaways

• Surge in Europol data‑breach complaints noted in EDPS annual report
• EU lacks an adequacy decision for Israel; national authorities lead oversight
• Transatlantic security pact could expose EU biometric data to US access
• EDPS role limited; EDPB drives adequacy assessments for third‑country transfers

Pulse Analysis

The European Union’s data‑protection architecture, anchored by the European Data Protection Supervisor (EDPS) and the European Data Protection Board (EDPB), is under heightened scrutiny after a wave of complaints about Europol’s handling of personal information. Wiewiórowski’s annual report flagged a notable increase in breach notifications, signaling systemic vulnerabilities in the continent’s supra‑national policing body. This surge has prompted national data‑protection authorities to take a more active role, while the EDPS remains a consultative voice within the EDPB’s broader adequacy‑decision process.

At the same time, the transatlantic security data‑sharing agreement with the United States—intended to streamline intelligence cooperation—has sparked alarm over the potential exposure of EU citizens’ biometric data. Critics argue that the framework lacks robust safeguards to prevent secondary use or unauthorized access by U.S. agencies, a concern amplified by recent revelations of expansive surveillance practices. The EU’s ongoing negotiations for a new data‑transfer mechanism must reconcile security imperatives with the General Data Protection Regulation’s stringent privacy standards, or risk eroding public trust in cross‑border data flows.

The debate extends to the Middle East, where NGOs operating in Gaza face intensified scrutiny from Israeli authorities. Without an EU adequacy decision for Israel, data transfers involving humanitarian workers remain subject to fragmented national oversight, creating legal uncertainty and potential privacy breaches for staff and beneficiaries alike. Wiewiórowski’s remarks highlight the need for a coordinated EU response that balances geopolitical realities with the protection of fundamental rights, a challenge that will shape the future of European data sovereignty and international cooperation.