On July 16th, the CJEU issued the Schrems II judgment which invalidates the Privacy Shield Decision and provides clarifications on SCCs.
A lot of noise and “fog” amongst organizations, particularly on the effects of the Schrems II judgement. This means that EU organizations should not be able anymore to rely on EU-U.S. Privacy Shield for transferring data to U.S.-based organizations.
It is, however, expected for the EU supervisory authorities and EDPB to react soon and to shed more light on this issue for the organizations.
To read the entire legal bulletin, please download the .pdf attached or visit http://www.tuca.ro/legal_bulletin/