On 16 July 2020, the European Court of Justice (CJEU) issued its long-awaited opinion in Case C-311/18, Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems (Schrems II). The CJEU invalidated the EU-US Privacy Shield framework and at the same time, approved the continued use of the EU Standard Contractual Clauses as a valid data transfer method, albeit with additional conditions. This important decision significantly impacts US businesses and also has broader, potentially global implications for cross-border personal data transfers and trade.

Impact on Privacy Shield certified companies