July 16, 2020

The Court of Justice of the European Union (CJEU) ruled on 16 July 2020 in the case of Data Protection Commissioner v. Facebook Ireland Limited and Maximillian Schrems (Schrems II) that the US-EU Privacy Shield is invalid. This important mechanism had previously allowed certain transfers of personal data from the European Economic Area (EEA) to the United States, and was widely used by international corporations. In many respects, the Privacy Shield was considered to be preferable to the other transfer mechanisms provided for by the General Data Protection Regulation (GDPR), and its demise will leave a substantial number of organisations looking for alternatives.

To read the full article, please click here.