On 16 July 2020, the Court of Justice of the European Union (CJEU) issued its long-awaited judgment in the case of Data Protection Commissioner v Facebook Ireland Limited, Maximillian Schrems(Case C-311/18), commonly referred to as “Schrems II”.

In its judgment, the CJEU declared that the EU-US Privacy Shield, a mechanism used to legitimise the transfer of data from the EU to the US, is invalid. In turn, the CJEU held that the Standard Contractual Clauses, an alternative mechanism used to legitimise transfers of data from the EU to third countries, remain valid – subject to conditions.

Harneys has published an extensive article on this judgment providing detailed information on the subject.

The article can be found here.