{"id":4129,"date":"2020-07-16T11:54:12","date_gmt":"2020-07-16T11:54:12","guid":{"rendered":"https:\/\/www.chirita-law.com\/?p=4129"},"modified":"2025-12-29T09:47:34","modified_gmt":"2025-12-29T07:47:34","slug":"cjue-gdpr-transferul-de-date-cu-caracter-personal-catre-statele-unite-ale-americii-nu-prezinta-suficiente-garantii-de-securitate","status":"publish","type":"post","link":"https:\/\/chirita-law.com\/en\/cjue-gdpr-transferul-de-date-cu-caracter-personal-catre-statele-unite-ale-americii-nu-prezinta-suficiente-garantii-de-securitate\/","title":{"rendered":"CJUE. GDPR. Transferul de date cu caracter personal c\u0103tre Statele Unite ale Americii nu prezint\u0103 suficiente garan\u0163ii de securitate."},"content":{"rendered":"<p class=\"wp-block-paragraph\">La data de 16.07.2020 s-a pronun\u021bat <a href=\"https:\/\/curia.europa.eu\/jcms\/upload\/docs\/application\/pdf\/2020-07\/cp200091ro.pdf\">Hot\u0103r\u00e2rea<\/a> din cauza C-311\/18, prin care Curtea de Justi\u021bie a Uniunii Europene a invalidat Decizia 2016\/1250 privind caracterul adecvat al protec\u021biei oferite de Scutul de confiden\u021bialitate dintre Uniunea European\u0103 \u0219i Statele Unite ale Americii \u00eentruc\u00e2t acesta nu respect\u0103 normele prev\u0103zute \u00een Regulamentul 2016\/678 al Parlamentului European \u0219i al Consiliului din 27 aprilie 2016 (GDPR).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00cen fapt, un cet\u0103\u021bean austriac, utilizator al platformei de socializare Facebook, a depus pl\u00e2ngere la autoritatea de supraveghere irlandez\u0103, pl\u00e2ngere care avea ca obiect interzicerea transferului de date cu caracter personal transferate de Facebook Ireland c\u0103tre Facebook Inc. al c\u0103rei sediu se afl\u0103 \u00een Statele Unite ale Americii.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00cen esen\u021b\u0103, cet\u0103\u021beanul austriac a sus\u021binut faptul c\u0103 Statele Unite ale Americii nu ofer\u0103 o protec\u021bie suficient\u0103 a datelor cu caracter personal transferate c\u0103tre aceast\u0103 \u021bar\u0103, solicit\u00e2nd suspendare ori interzicerea pentru viitor a acestui tip de transfer de date.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Astfel, CJUE a fost investit\u0103 cu o cerere de decizie preliminar\u0103 prin care aceasta urma s\u0103 se pronun\u021be cu privire la aplicabilitatea GDPR \u00een cadrul transferurilor de date c\u0103tre SUA \u0219i a valabilit\u0103\u021bii Deciziilor 2010\/87 \u0219i 2016\/1250.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Prin hot\u0103r\u00e2rea pronun\u021bat\u0103 ast\u0103zi, Curtea arat\u0103 c\u0103 \u00een ceea ce prive\u0219te <a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/RO\/TXT\/PDF\/?uri=CELEX:32010D0087&amp;from=ro\">Decizia 2010\/87<\/a> aceasta este valid\u0103 \u00eentruc\u00e2t \u00een raport cu Carta drepturilor fundamentale ale Uniunii Europene nu exist\u0103 elemente care sunt de natur\u0103 s\u0103 afecteze validitatea actului. \u00cens\u0103, \u00een ceea ce prive\u0219te <a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/RO\/TXT\/PDF\/?uri=CELEX:32016D1250&amp;from=RO\">Decizia 2016\/1250<\/a> s-a constatat c\u0103 acesta este nevalid\u0103.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sub acest aspect, Curtea a ar\u0103tat c\u0103 GDPR se aplic\u0103 \u00een cazul \u00een care un operator economic stabilit \u00eentr-un stat membru transfer\u0103 date cu caracter personal \u00een scop comercial c\u0103tre un alt operator economic stabilit \u00eentr-o \u021bar\u0103 ter\u021b\u0103 chiar \u0219i \u00een ipoteza \u00een care datele transferate sunt susceptibile de a fi prelucrate de autorit\u0103\u021bile unei \u021b\u0103ri ter\u021be \u00een scopuri de siguran\u021b\u0103 public\u0103, de ap\u0103rare \u0219i de securitate a statului.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Totodat\u0103, se arat\u0103 c\u0103 persoanele a c\u0103ror date cu caracter personal sunt transferate c\u0103tre o \u021bar\u0103 ter\u021b\u0103 trebuie s\u0103 beneficieze de un nivel de protec\u021bie cel pu\u021bin egal cu cel garantat de dreptul Uniunii, mai precis de prevederile GDPR. Astfel, \u00een analiza nivelului de protec\u021bie trebuie avute \u00een vedere at\u00e2t stipula\u021biile contractuale dintre exportatorul de date \u0219i destinatarul din statul ter\u021b, c\u00e2t \u0219i un eventual acces la datele cu caracter personal transferate a diferitelor autorit\u0103\u021bi publice ale acelui stat ter\u021b.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Merg\u00e2nd mai departe, Curtea a statuat c\u0103 \u00een ceea ce prive\u0219te obliga\u021biile autorit\u0103\u021bilor de supraveghere, \u00een ipoteza \u00een care nu exist\u0103 o Decizie adoptat\u0103 \u00een mod valabil de Comisie, acestea au obliga\u021bia s\u0103 suspende sau s\u0103 interzic\u0103 orice activitate care implic\u0103 transfer de date cu caracter personal atunci c\u00e2nd clauzele standard de protec\u021bie nu sunt sau nu pot fi respectate \u00een statul ter\u021b, iar protec\u021bia impus\u0103 de dreptul unional nu poate fi asigurat\u0103 prin alte mijloace.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nu \u00een ultimul r\u00e2nd, \u00een ceea ce prive\u0219te Decizia 2016\/1250, CJUE a precizat c\u0103 limit\u0103rile \u00een raport de protec\u021bia datelor cu caracter personal care decurg din reglementarea intern\u0103 a Statelor Unite care au ca obiect accesul \u0219i utilizarea de c\u0103tre autorit\u0103\u021bile publice americane a datelor cu caracter personal rezultate din transferul datelor aferente cet\u0103\u021benilor unionali c\u0103tre SUA nu sunt \u00een m\u0103sur\u0103 s\u0103 \u00eendeplineasc\u0103 cerin\u021bele, cel pu\u021bin echivalente, cu prevederile din dreptul unional. Mai exact, programele de supraveghere \u00eentemeiate pe reglement\u0103rile americane nu se limiteaz\u0103 la un strict necesar, o cerin\u021b\u0103 primordial\u0103 \u00een dreptul unional.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">De asemenea, Curtea arat\u0103 c\u0103 de\u0219i exist\u0103 o serie de cerin\u021be pe care autorit\u0103\u021bile publice americane trebuie s\u0103 le respecte, reglementarea nu pune la dispozi\u021bia persoanelor vizate drepturi opozabile autorit\u0103\u021bilor americane \u00een fa\u021ba instan\u021belor judec\u0103tore\u0219ti.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cu alte cuvinte, persoana vizat\u0103 nu are o cale de atac \u00een fa\u021ba unui organ care, \u00een esen\u021b\u0103, ofer\u0103 garan\u021bii echivalente cu cele impuse de c\u0103tre dreptul Uniunii Europene.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00cen concluzie, Curtea prin Hot\u0103r\u00e2rea din Cauza C-311\/18 a declarat valid\u0103 decizia 2010\/87 Comisiei privind clauzele contractuale tip pentru transferul de date cu caracter personal c\u0103tre persoanele \u00eemputernicite de c\u0103tre operator stabilite \u00een \u021b\u0103ri ter\u021be, \u00eens\u0103 a declarat nevalid\u0103 Decizia 2016\/1250 privind caracterul adecvat al protec\u021biei oferite de Scutul de confiden\u021bialitate UE-SUA.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/chirita-law.com\/en\/team\/david-popa\/\" target=\"_blank\" rel=\"noreferrer noopener\">Avocat David Popa<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>La data de 16.07.2020 s-a pronun\u021bat Hot\u0103r\u00e2rea din cauza C-311\/18, prin care Curtea de Justi\u021bie a Uniunii Europene a invalidat Decizia 2016\/1250 privind caracterul adecvat al protec\u021biei oferite de Scutul de confiden\u021bialitate dintre Uniunea European\u0103 \u0219i Statele Unite ale Americii \u00eentruc\u00e2t acesta nu respect\u0103 normele prev\u0103zute \u00een Regulamentul 2016\/678 al Parlamentului European \u0219i al Consiliului [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":4111,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[85,89],"tags":[],"class_list":["post-4129","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dreptul-uniunii-europene-reprezentare-in-fata-cjue","category-protectia-datelor-gdpr"],"acf":[],"_links":{"self":[{"href":"https:\/\/chirita-law.com\/en\/wp-json\/wp\/v2\/posts\/4129","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/chirita-law.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/chirita-law.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/chirita-law.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/chirita-law.com\/en\/wp-json\/wp\/v2\/comments?post=4129"}],"version-history":[{"count":0,"href":"https:\/\/chirita-law.com\/en\/wp-json\/wp\/v2\/posts\/4129\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/chirita-law.com\/en\/wp-json\/wp\/v2\/media\/4111"}],"wp:attachment":[{"href":"https:\/\/chirita-law.com\/en\/wp-json\/wp\/v2\/media?parent=4129"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/chirita-law.com\/en\/wp-json\/wp\/v2\/categories?post=4129"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/chirita-law.com\/en\/wp-json\/wp\/v2\/tags?post=4129"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}