I have just filed nine separate (US-CH) Privacy Shield complaints against Facebook with the Swiss data protection authority.

The requests are:

The links above point to my original exchange with Facebook. You can see the date of each post there.

These then became complaints with the Safe Harbor arbitrator/Privacy Shield mediator, TRUSTe, which has refused to act on these.

My TRUSTe dashboards. Those that I have not filed a complaint for, I have essentially won, except the request with TRUSTe itself for opening up of its API (I wonder why!)

These TRUSTe complaints were met, after exchanges over several months on the substance of the request, by a two-sided decision that Safe Harbor or Privacy Shield protections should not apply to the requested data.

TRUSTe stock refusal to initiate proceedings related to my complaints.

Note that my opinion on jurisdiction or relevance of Privacy Shield/Safe Harbor was never asked, that TRUSTe is supposed to be an independent mediator/arbitrator, and that it consulted privately with Facebook prior to dismissing my complaint, in violation of its own rules of procedure (this is itself a basis for a FTC complaint against the arbitrator, for deceptive commercial practices…).

Paul-Olivier Dehaye is co-founder of PersonalData.IO, a startup helping individuals regain control of their personal data, through innovative products built around the GDPR. PersonalData.IO also offers compliance solutions, business innovation and consulting services to companies, as well as expert advice to educators, regulators and journalists.