ODNI implements new security measures in accordance with Executive Order 14086

July 3, 2023 - The Office of the Director of National Intelligence (ODNI), in cooperation with elements of the Intelligence Community (IC), today released the IC's policies and procedures for implementing the privacy and civil liberties safeguards set forth in Executive Order 14086, "Enhancing Safeguards for U.S. Intelligence Activities."

When President Joe Biden signed Executive Order (EO) 14086, the White House emphasized that the EO "directs the steps the United States will take to implement U.S. commitments under the European Union-U.S. Privacy Framework (EU-US DPF)." EO 14086 not only strengthens the existing Data protection and civil rights in the context of intelligence activities, but also extends them considerably. It stipulates that intelligence activities "must Privacy and civil rights of all persons, regardless of their nationality or country of residence" and "only be carried out when necessary to advance a validated intelligence priority and only to an extent and in a manner proportionate to that priority".

Today's publication by the ODNI is an important milestone in the implementation of these requirements and obligations. They are the result of consultations with the Attorney General, the ODNI's Civil Liberties Protection Officer (CLPO), and the Privacy and Civil Liberties Committee. Each set of procedures is tailored to the specific powers, duties and responsibilities of the respective IC elements.

**The significance for companies and the role of the Appropriateness decision**

This progress is particularly relevant for companies that personal data between the EU and the USA. The increased data protection provisions and civil liberties, particularly in the context of intelligence activities, underline the US commitment to the protection of personal data and could increase trust in cross-border data transfers.

The US Department of Justice and the ODNI have announced the fulfillment of commitments under President Biden's EO regarding the EU-US Privacy Framework. According to Commerce Secretary Gina Raimondo, the DOJ has designated EU member states, as well as Iceland, Liechtenstein and Norway, as "qualified states" whose citizens will be able to seek redress through the proposed Privacy Review Tribunal while receiving enhanced U.S. privacy rights. These classifications will come into force as soon as the European Commission has adopted its Appropriateness decision with the USA.

In light of these developments, companies should carefully review the new regulations and prepare for any adjustments to their data protection practices. This step represents another milestone in the efforts to harmonize data protection standards and ensure the free flow of data across the Atlantic.