{
  "url": "https://openlegislation.uk/eu-decision-2016-1250/annex-III/annex-A",
  "json_url": "https://openlegislation.uk/eu-decision-2016-1250/annex-III/annex-A.json",
  "legislation": "eudn/2016/1250",
  "legislation_title": "Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-U.S. Privacy Shield (notified under document C(2016) 4176) (Text with EEA relevance) (revoked)",
  "legislation_url": "https://openlegislation.uk/eu-decision-2016-1250",
  "path": "annex/III/annex/A",
  "kind": "appendix",
  "number": "Annex A",
  "heading": "EU-U.S. Privacy Shield Ombudsperson mechanism regarding signals intelligence",
  "text": "In recognition of the importance of the EU-U.S. Privacy Shield Framework, this Memorandum sets forth the process for implementing a new mechanism, consistent with Presidential Policy Directive 28 (PPD-28), regarding signals intelligence.\nOn January 17, 2014, President Obama gave a speech announcing important intelligence reforms. In that speech, he pointed out that ‘[o]ur efforts help protect not only our nation, but our friends and allies as well. Our efforts will only be effective if ordinary citizens in other countries have confidence that the United States respects their privacy too.’ President Obama announced the issuance of a new presidential directive—PPD-28—to ‘clearly prescribe what we do, and do not do, when it comes to our overseas surveillance.’\nSection 4(d) of PPD-28 directs the Secretary of State to designate a ‘Senior Coordinator for International Information Technology Diplomacy’ (Senior Coordinator) ‘to … serve as a point of contact for foreign governments who wish to raise concerns regarding signals intelligence activities conducted by the United States.’ As of January 2015, Under Secretary C. Novelli has served as the Senior Coordinator.\nThis Memorandum describes a new mechanism that the Senior Coordinator will follow to facilitate the processing of requests relating to national security access to data transmitted from the EU to the United States pursuant to the Privacy Shield, standard contractual clauses (SCCs), binding corporate rules (BCRs), ‘Derogations,’ or ‘Possible Future Derogations,’ through established avenues under applicable United States laws and policy, and the response to those requests.\n1.\n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .\n2.\n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .\n3.\nSubmitting Requests.\n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .\n4.\nCommitments to Communicate with Submitting EU Individual Complaint Handling Body.\n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .\n5.\n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .\n6.\n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .",
  "extent": "E+W+S+N.I.",
  "status": "repealed",
  "version": "current",
  "annotations": [
    {
      "type": "F",
      "label": "F1",
      "text": "Decision revoked (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), Sch. 3 para. 1(o); 2020 c. 1, Sch. 5 para. 1(1)"
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2016/1250/annex/III/annex/A",
    "retrieved_at": "2026-11-01T15:13:53.293736+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}