ECJ declares EU/US Privacy Shield invalid.
According to Article 44 of the EU General Data Protection Regulation (GDPR), any transfer of personal data to a third country is only permitted if the controller and processor ensure an adequate level of protection for the transferring data. Until now, the transfer of personal data to the US has mostly been based on the EU/US Privacy Shield or the standard contractual clauses developed by the Commission. With the recent ruling of the European Court of Justice on 16.07.2020, the Privacy Shield agreement was declared invalid, so that this legal basis for data transfers to the United States no longer exists. In contrast, the ECJ confirmed the validity of the standard contractual clauses, meaning that they can continue to be used as a basis for the transfer of personal data to third countries.”