*EU to adopt new US data rules in July* The European Commission is set to present a new draft of its data-exchange pact with the US, the Privacy Shield, in early July. EU justice commissioner Vera Jourova told EUobserver in a recent interview that the most contentious issues had been agreed by Washington and Brussels. These concerned access to data by US security services, bulk collection of people’s personal information and independent oversight. “We reached an accord on more precise listing of cases when bulk collection can occur and a better definition of how our American partners understand the difference between bulk collection which may be justified and mass surveillance without any purpose, which is not tolerable”, she said. [] Giovanni Buttarelli, the European data protection supervisor (EDPS), told reporters in May he too had "serious concerns" with Privacy Shield. But Jourova remained confident. Aside from having narrowed down on US bulk collection, she said she had also tackled the problem of oversight. The US has promised to set up a special ombudsman, embedded in the state department, to help deal with complaints from EU nationals. But doubts emerged over the independence of the new office. Jourova told this website that "a more precise definition of competencies, status, and functioning" of the ombudsman have since been agreed. Not everything is ready, however. Jourova said the EU and US still need to agree on how long firms can retain the data and for what purpose. "We want to make sure that personal data will only be kept for that period which is necessary and to agree on exceptions which enable them to keep data for a longer time," she said. Exceptions in the EU include retaining data for scientific research purposes or for healthcare needs. “In the US they have a broader, a more benevolent system [on retention], and everything that we do on Privacy Shield is to make sure that there’ll be equivalent, not the same, but equivalent, protection [for EU and US nationals]”, she said. <https://euobserver.com/justice/133941> *EU, United States agree on changes to strengthen data transfer pact* The European Union and the United States have agreed changes to a data transfer pact that is key to transatlantic business, including stricter rules for companies holding information on Europeans and clearer limits on U.S. surveillance. The revised EU-U.S. Privacy Shield was sent for review by European member states overnight. They are expected to hold a vote in early July, several EU sources said, at which point it will enter into force. [] EU privacy regulators expressed concern about an initial deal struck in February. The U.S. government has now explained further the specific conditions under which intelligence services might have to collect data in bulk and safeguards on how the data is used, EU sources said. A letter from the Office of the Director of National Intelligence, seen by Reuters, gives an example of the United States seeking information on the activities of a terrorist group in the Middle East believed to be plotting attacks against Europe. If Washington does not have information such as names, phone numbers or email addresses it would collect communications "to and from that region for further review and analysis to identify those communications that relate to the group," the letter says. "Thus, even when targeting through the use of specific selectors is not possible, the United States does not collect all communications from all communications facilities in the world." The United States also explained how a new privacy official - whose role would be to field complaints from EU citizens about U.S. spying - would be independent from the intelligence services. <http://www.reuters.com/article/us-eu-dataprotection-usa-idUSKCN0ZA1QT>