a.jpg) |
| KU Leuven Profs. Jan Wouters, Evelyne Terryn, and Peggy Valcke; Sylvia Lissens; me; KU Leuven Prof. Marieke Wyckaert, dissertation committee chair; and via Zoom, Prof. Przemysław Pałka, Jagiellonian University, Poland (photo presumed © and used with permission) |
This research addresses the question of what the core differences between the U.S. and EU legal approaches towards personal data (protection) are and if there are signs of convergences. The question is approached through functional comparative law research conducted on three levels to reflect the perspectives of the three main stakeholders: the private sector, civil society, and the public sector, consisting of government intelligence and law enforcement agencies. The United States and the European Union seem to understand and qualify personal data differently in words and deeds, but upon closer inspection they have more in common than may seem at first sight. Consequently, it was possible to develop a roadmap for how the U.S. and EU approaches can co-exist, based on the convergences between the U.S. and EU approaches towards data privacy on all three levels.
I have learned and benefited immensely from serving on Lissens's dissertation committee for about the last five years. I myself posited a convergence in the data privacy expectations of American and European people many years ago, before the EU General Data Protection Regulation (GDPR) superseded its predecesor EU Data Protection Directive. I dared not then conceive a practical framework for a U.S. "adequacy" determination under what became the GDPR, which is the aim of Dr. Lissens's work.
 |
| Faculty of Law at KU Leuven, Belgium RJ Peltz-Steele CC BY-NC-SA 4.0 |
On October 1, Lissens defended her theses ably against healthy skepticism both from European interrogators and from me. I asked whether the hodgepodge of U.S. state data protection systems, as long as Congress remains paralyzed, can possibly be GDPR "adequate" when the state systems reach only consumer transactions.
Consumer privacy is mostly what the GDPR is worried about, Lissens reasoned, and the EU might have to settle for the states' laboratory approach. Contrary to what I have witnessed as the prevailing ethos among young people in Europe, Lissens argued that European people might have to become comfortable with the notion known to U.S. law that being photographed in a public place is not a privacy violation.
I asked Lissens whether the U.S.-EU Data Privacy Framework can hold up when it does not require the United States to divulge to European complainants how their privacy was compromised or what was done about it. She fairly answered that European citizens usually can expect nothing more from their own governments.
Moreover, Lissens questions the competence of European courts in the EU treaty system to apply data protection law at all to the national security apparatuses of EU member states, much less to challenge U.S. policy. While she has admiration for the work of European privacy advocates such as Max Schrems, she challenges the very premise of the Schrems decisions in the EU Court of Justice insofar as they assumed jurisdiction over national security policy by way of data protection enforcement.
Among Lissens's distinguished credentials is a 2020-21 stint at Duke University, my alma mater in law, where she held a scholarship to study as a master's student and started adding expertise in U.S. law to her multi-jurisdictional expertise. Lissens, who herself has taught comparative law and graciously visited my class in the past via Zoom, is on the academic job market. She is a gifted scholar and teacher, so schools, place your bids.
