With its decision of 16 July 2020 in case C-311/18 (“Schrems II decision”), the Court of Justice of the European Union (CJEU) has invalidated the EU-US Privacy Shield mechanism widely used for transferring personal data from the EU to the USA.

More importantly, the Court cast aspersions on the use of Standard Contractual Clauses (“SCCs”) as a mechanism for international data transfers, though it did not declare these to be invalid per se.

This decision will have an enormous impact on both transatlantic and global data transfers. Data exporters within the EU will need to take urgent action to ensure compliance.

You can find the complete newsletter in the download area below.