EU wrong to share personal information about airline passengers with U.S., says court

computerworld.com
EU wrong to allow passenger data release, says court
Paul Meller

May 30, 2006 (IDG News Service) BRUSSELS - A European Union decision made two years ago to share personal information about airline passengers with U.S. authorities was illegal, the European Court of Justice ruled today.

The decision to share passenger name records, which include details such as citizens' names, addresses and travel schedules, came in the wake of the Sept. 11, 2001, attacks and was intended to help the U.S. pursue its so-called "war on terrorism."

The European Parliament opposed the agreement, which was brokered by the European Commission, the EU's executive body, and approved by the 25 national governments of the EU member states.

The Parliament appealed to the Court of Justice in Luxembourg, claiming that the commission was wrong to conclude that European citizens' personal data would be adequately protected by authorities in the U.S. and that the national governments were wrong to approve the agreement to transfer the data, signed with the U.S. government in May 2004.

The court agreed with both claims by Parliament and overruled both the commission and the council of national governments.

"Neither the commission decision nor the council decision are founded on an appropriate legal basis," the court said in a statement.

The overturning of the decisions marks a victory for civil liberties activists, but it leaves travel companies, especially the airlines that must collect the passenger data and hand it over to U.S. authorities, in a legal quandary.

Under U.S. laws passed after Sept. 11, 2001, airlines can be fined for failing to hand over the information.

The court gave the commission and the council until Sept. 30 to find another solution. The agreements signed two years ago will remain in place for another four months, it said, "for reasons of legal certainty," while European legislators seek an alternative.

Some national governments, including the British government, are considering striking a bilateral agreement with the U.S. in order to continue sharing passengers' details with authorities there.

A U.S. official said, "We are working with the commission, and we will make the best efforts to find an agreed interim approach to data transfers which fully respect the ruling." The official said the U.S. government remains committed to the principle of privacy. The aim during the four-month transition period is to avoid disruption to trans-Atlantic traffic and to maintain a high level of security, he said.