The MEPs urge the Commission to come up immediately with alternatives to Safe Harbor, following the ruling by the European Court of Justice. They are also concerned about the surveillance laws in several EU countries.

Claude Moraes, the civil liberties committee chair and rapporteur on mass surveillance, said:

"The European Parliament's inquiry into the revelations by Edward Snowden of electronic mass surveillance was the most comprehensive investigation completed to date. Not only did the report call for an immediate end to indiscriminate mass surveillance practices by intelligence services both in the EU and the US, but it also set out a roadmap for further action in this area. Following this inquiry, there is widespread agreement that something has gone wrong with the way that intelligence agencies and others have acted. Work needs to continue to ensure that civil liberties are defended on the internet too."

The resolution takes stock of the action (or lack thereof) by the European Commission, other EU institutions and member states to follow up the recommendations set out by Parliament in its resolution of March 12, 2014, on the electronic mass surveillance of EU citizens.

"Safer" Safe Harbor

MEPs welcome the October 6 ruling by the European Court of Justice (ECJ) in the Schrems case, invalidating the Commission's decision that Safe Harbor provides sufficient protection for the data of EU citizens when it is transferred to the US, thus vindicating Parliament's long-standing concerns about the agreement. The Commission must immediately take the necessary measures "to ensure an effective level of protection" equivalent to the protection ensured in the EU, they say.

They protest that Parliament has received no formal feedback from the Commission regarding the implementation of the 13 recommendations for a "safer" Safe Harbor, and stress that "it is now urgent that the Commission provide a thorough update on the negotiations thus far and the impact of the judgment on the further negotiations."

They also invite the Commission to reflect "immediately" on alternatives to Safe Harbor and on the "impact of the judgment" on any other instruments used for the transfer of personal data to the US and report on it by the end of 2015.

Time to act or face the consequences

MEPs consider the Commission's reaction to Parliament's 2014 resolution "so far highly inadequate" given the extent of the revelations of mass surveillance. "EU citizens' fundamental rights remain in danger" and "too little has been done to ensure their full protection," MEPs say.

They call on the Commission "to act on the calls made in the resolution by December 2015 at the latest," reserving "the right to bring an action for failure to act or to place certain budgetary resources for the Commission in a reserve until all recommendations have been properly addressed."

Concerns in several EU countries

MEPs are concerned by "some of the recent laws in some member states that extend the surveillance capabilities of intelligence bodies", including in France, the UK and the Netherlands. They are also worried about the revelations of mass surveillance of telecommunications and Internet traffic inside the EU by the German foreign intelligence agency BND in cooperation with the US National Security Agency (NSA).

On the US side, the committee welcomes the recent legislative and judicial decisions to limit mass surveillance by the NSA, such as the adoption of the USA FREEDOM Act and the ruling of the Second Circuit Court of Appeals on the NSA's telephone record collection program. It regrets, however, that "these decisions focus mainly on US persons while the situation of EU citizens remains the same."

Whistleblower protection

MEPs regret that the Commission has not responded to Parliament´s request to carry out a study on a comprehensive "European Whistleblower protection program" and calls on it to present a communication on this by the end of 2016 at the latest.

The resolution also calls for a European strategy for greater IT independence to increase EU IT security and online privacy, and stresses the need to ensure meaningful democratic oversight of intelligence activities and to rebuild trust with the US.