Court of Justice of the European Union on data protection
21 Jul 2020
|
On 16 July 2020, the Court of Justice of the European Union (CJEU) issued its long-awaited judgment in the case of Data Protection Commissioner v Facebook Ireland Limited, Maximillian Schrems(Case C-311/18), commonly referred to as “Schrems II”.
In its judgment, the CJEU declared that the EU-US Privacy Shield, a mechanism used to legitimise the transfer of data from the EU to the US, is invalid. In turn, the CJEU held that the Standard Contractual Clauses, an alternative mechanism used to legitimise transfers of data from the EU to third countries, remain valid – subject to conditions.
Harneys has published an extensive article on this judgment providing detailed information on the subject.
The article can be found here.
Authors
Related content
Regulatory Blog
CySEC highlights ESMA’s survey on AI adoption in the Securities Sector by financial entities
Regulatory Blog
G7 and US agreement to exclude US parented multinational from Pillar 2
Regulatory Blog
Key highlights from the Bermuda Monetary Authority's regulatory update (January–March 2025)