{"id":2684,"date":"2025-03-31T17:47:27","date_gmt":"2025-03-31T15:47:27","guid":{"rendered":"https:\/\/www.kvinne.de\/?p=2684"},"modified":"2025-04-02T13:05:28","modified_gmt":"2025-04-02T11:05:28","slug":"bringt-trump-den-transatlantischen-datenschutz-ins-wanken","status":"publish","type":"post","link":"https:\/\/www.kvinne.de\/en\/bringt-trump-den-transatlantischen-datenschutz-ins-wanken\/","title":{"rendered":"Is Trump Undermining Transatlantic Data Protection?"},"content":{"rendered":"

Die USA sind Heimat vieler f\u00fchrender Cloud-Anbieter \u2013 darunter Amazon Web Services (AWS), Microsoft Azure und Google Cloud. Diese Anbieter dominieren mit \u00fcber 70 % Marktanteil die europ\u00e4ische Cloud-Infrastruktur. Doch gerade diese starke Abh\u00e4ngigkeit birgt datenschutzrechtliche Risiken: Die \u00dcbermittlung personenbezogener Daten in die USA ist rechtlich nur unter bestimmten Bedingungen erlaubt \u2013 aktuell gest\u00fctzt durch das EU-US Data Privacy Framework<\/strong>.<\/p>\n\n\n\n

Doch das politische Klima in den USA wirft Fragen auf: Sollte Pr\u00e4sident Donald Trump die rechtliche Grundlage f\u00fcr den Datentransfer<\/strong> kippen, m\u00fcssen Firmen neu denken. Bereits jetzt wurde ein zentrales Kontrollgremium des Datenschutzabkommens, das \u201ePrivacy and Civil Liberties Oversight Board<\/a>\u201c, faktisch entmachtet. Ohne diese unabh\u00e4ngige Instanz fehlt ein wichtiges Korrektiv.<\/p>\n\n\n\n

Snowden, Schrems and the Lessons of the Past<\/strong><\/h2>\n\n\n\n

The European Court of Justice (ECJ) has already struck down a transatlantic data protection agreement twice \u2013 Safe Harbor in 2015 and Privacy Shield in 2020. One of the triggers was Edward Snowden\u2019s revelations about the access of U.S. intelligence agencies to the data of European citizens.<\/p>\n\n\n\n

This story shows: Cloud solutions with server locations outside the EU<\/strong> are repeatedly affected by legal uncertainty \u2013 despite technical security measures. A political decision in Washington can become a risk for European companies overnight.<\/p>\n\n\n\n

On-premise or European cloud: More control, less risk<\/strong><\/h2>\n\n\n\n

Companies that rely on on-premise models or cloud solutions with data locations in the EU<\/strong> are better able to address such risks. Although the administrative effort is higher, data protection, confidentiality, and compliance<\/strong> can be ensured more reliably.<\/p>\n\n\n\n

For particularly sensitive data \u2013 for example in industry, healthcare, or with personal customer information \u2013 a critical review is worthwhile: Does data processing necessarily have to run through US providers? Or aren\u2019t European providers or in-house servers the better alternative?<\/p>\n\n\n\n

Recommendation: Plan an exit strategy and data protection strategy<\/strong><\/h2>\n\n\n\n

Authorities such as the data protection commissioners of the federal states recommend that companies address exit strategies<\/strong> at an early stage \u2013 in other words, plans for the event that data transfers to the USA are no longer legally viable. EU standard contractual clauses can also be used, but these involve considerable effort and auditing obligations \u2013 and do not bind the US authorities themselves.<\/p>\n\n\n\n

What should companies do now?<\/h2>\n\n\n\n