EuGH ruling C-362/14 declares U.S.-EU Safe Harbor Arrangement invalid.

The U.S.-EU Safe Harbor Arrangement was declared invalid in the ECJ ruling C-362/14 of 6 October 2015. After a period of negotiation, the U.S. Department of Commerce and the European Commission agreed on a new EU-U.S. Privacy Shield Framework that became effective in August 2016. The rules of the EU-U.S. Privacy Shield are based on the requirements of the previous Safe Harbor Framework. The requirements for companies wishing to join the Privacy Shield are comparable. However, the protection of transferred personal data of EU citizens against access by U.S. authorities is more far-reaching.