INTERNET VIKINGS: THE NEW ERA OF TRANSFERRING DATA. LIVE WITH MAX SCHREMS

While all others are talking about Schrems’ ruling, Internet Vikings in collaboration with Holm Security talk with the man himself -Max Schrems. During the webinar, ‘The new era of transferring data. Live with Max Schrems’, Peter Ekmark, CEO of Internet Vikings and Stefan Thelberg, CEO of Holm Security discuss the most pressing issues in the field of data transfers and privacy protection.

Max Schrems, lawyer, author and privacy activist has become famous as a bit of a giant slayer and is known around the world for his campaigns against Facebook for its privacy violations, as well as complaints filed under GDPR against Amazon, Apple Music, DAZN and other big tech companies. Most recently his name started to be associated with the ruling of the European Court of Justice which invalidated Privacy Shield as such that it does not provide adequate protection to data transfers. Schrems is also the founder of NOYB – European Center for Digital Rights.

Since June 16, 2020, when the European Court of Justice declared Privacy Shield invalid in a ruling known as Schrems II, data transfers and privacy protection have become especially hot topics and the implications and repercussions for businesses are huge. And it is not that easy to figure it all out. That is why the event organized by Internet Vikings generated so much interest among professionals of various industries, including online gaming.

The webinar consists of two parts: the keynote presentation by Schrems’, followed by a panel discussion during which Peter and Stefan join Max in offering their unique perspective on the data privacy issue and to identify what are the possible solutions.

“Basically we’re just going to go on a wild ride through the whole data transfer debate” explains Max. “We talk about American law and European law and how that interacts and often conflicts.”

Specifically, the speakers review at least four crucial issues. The overview and latest developments in the field of data, the Privacy Shield invalidation impact on data transfers, the future of Standard Contractual Clauses plus practical steps for businesses, and more.

“The baseline here is that you have a conflict of interest when it comes to privacy and surveillance, if your business is utilizing a US cloud supplier like AWS or other US based service provider. If you are an iGaming company, financial or medical institution, what are the possible risks?” asks Peter Ekmark.

There are clearly data privacy issues that are out there in the real world today, but it’s not just clever sort of fraudsters on social media that can steal your data or get access to it, state, and non-state actors have many other ways to get that data, including by legal means.

As explained by the speakers of the webinar, the potential conflict between GDPR and Cloud Act regulations, and in the absence of Privacy Shield protection, therefore could pose serious legal concerns for individual European organizations that use and store information with US cloud services and are subject to US legislation. If US authorities exercise their rights under the Act, such as demands for disclosure of personal data for example, and with the new limitations on Privacy Shield, it is in direct conflict with GDPR, and such transfer is not permitted under GDPR regulation, at least not without a separate agreement. It does not matter that an American cloud service provider has its servers physically located within the EU. They are still subject to the CLOUD Act and may thus be forced to disclose information to relevant authorities.

The potential implications for the iGaming industry are immense, and that’s where this stuff really comes into play.

“There are possibly only two solutions right now” concludes Max. “Either we abandon the fundamental right to privacy in Europe which would require all member states to change the treaties, the US changes its law, or European companies move all of its data out of the US with immediate effect.”

That’s where services provided by Internet Vikings might be handy. Internet Vikings provides bespoke hosting services across the most relevant jurisdictions. At the beginning of 2021 the company achieved ISO 27001 certification which proved its security management system met the highest standards. Together with full compliance to GDPR, this makes Internet Vikings a wise choice for every company that looks for a reliable provider able to take care of the data.

The webinar concluded with an offer of a free personal consultation with experts from Internet Vikings and Holm Security. Every attendee got this opportunity to receive inputs about data transfers and privacy protection in the field of hosting or cybersecurity for their companies.