Deep Dive Episode 279 – Transatlantic Debate: Evaluating the EU-US Data Privacy Framework
Regulatory Transparency Project's Fourth Branch Podcast
Regulatory Transparency Project's Fourth Branch Podcast
In October 2022, President Biden issued an executive order regarding the European Union - U.S. Data Privacy Framework. The Framework allows for data flows between the EU and the U.S., and it was established after the European Court of Justice struck down a prior agreement known as the EU-U.S. Privacy Shield. The executive order addresses U.S. collection of signals intelligence, which has been a source of concern for EU regulators and privacy advocates. The executive order limits signals intelligence collection to defined national security objectives, requires the privacy and civil liberties of all persons be considered regardless of nationality, and the collection must be proportionate. In addition, the executive order calls for a multi-layered review process that will allow individuals to lodge complaints regarding the collection of signals intelligence.
Our experts will discuss whether the Framework addresses the concerns of privacy advocates in the EU and the U.S., and they will consider the implications of the review process for U.S. intelligence collection. This program will also explore whether the EU and U.S. can reach a durable privacy agreement given the tension between EU privacy preferences and U.S. national security needs.
Featuring:
Visit our website – www.RegProject.org – to learn more, view all of our content, and connect with us on social media.
*******
As always, the Federalist Society takes no position on particular legal or public policy issues; all expressions of opinion are those of the speaker.
Partner, Steptoe & Johnson LLP
Stewart Baker is a partner in the law firm of Steptoe & Johnson in Washington, D.C. From 2005 to 2009, he was the first Assistant Secretary for Policy at the Department of Homeland Security. His law practice covers cybersecurity, data protection, homeland security, and travel and foreign investment regulation; he has been awarded one patent.
Mr. Baker has been General Counsel of the National Security Agency and General Counsel of the commission that investigated WMD intelligence failures prior to the Iraq war. He is the author of Skating on Stilts, a book on terrorism, cybersecurity, and other technology issues; he also hosts the weekly Cyberlaw Podcast.
Founder, NOYB
Max Schrems is an Austrian activist, lawyer, and author who is widely known for his campaigns against Facebook for its privacy infringements, including violations of European privacy laws and the alleged transmission of personal data to the US National Security Agency (NSA) as part of the NSA's PRISM program. Schrems is the founder of None of Your Business (NOYB), a European non-profit organization that focuses on privacy issue and privacy violations in the private sector. NOYB initiatives support the EU's General Data Protection Regulation (GDPR), the ePrivacy Regulation, and information privacy in general.
Executive Vice President, Chief Legal Officer, Gates Corporation
Matthew R. A. Heiman joined the Company in May 2026 and has served as the Company’s Chief Legal Officer and Corporate Secretary since June 2026. As Chief Legal Officer, Mr. Heiman is responsible for all legal functions for Gates, including securities and corporate governance, M&A, litigation, commercial, regulatory, compliance, patents and trademarks, real estate, employment and labor, sustainability and environmental matters. Prior to joining Gates, Mr. Heiman held senior legal leadership roles at Waystar, where he served as Chief Legal & Administrative Officer from 2023 to 2025 and as General Counsel and Corporate Secretary from 2020 to 2023. Prior to that, he was with Johnson Controls, where he served as Vice President, Corporate Secretary, and Associate General Counsel. Mr. Heiman has been a Senior Fellow for the National Security Institute at George Mason University’s Antonin Scalia School of Law since 2018.