Schrems II decision: Crossborder data transfer uncertainty

Joan Antokol of Park Legal LLC discusses the implications for US multinationals

On 16 July 2020, the European Court of Justice (CJEU) issued its long-awaited opinion in Case C-311/18, Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems (Schrems II). The CJEU invalidated the EU-US Privacy Shield framework and at the same time, approved the continued use of the EU Standard Contractual Clauses as a valid data transfer method, albeit with additional conditions. This important decision significantly impacts US businesses and also has broader, potentially global implications for cross-border personal data transfers and trade.

Impact on Privacy Shield certified companies

International Report subscribers please login to access the full article.

If you wish to subscribe please see our subscription information.