As we all know, Schrems II decision has forced businesses to revisit the way they approach international data transfer.
The European Court of Justice declared the EU-US Privacy Shield – an international agreement between the EU and the US with requirements to ensure an adequate level of protection of personal data exported to the US- invalid. According to the Court, US laws had several shortcomings that impede the protection of personal data and violates the GDPR. The judgment did uphold the use of Standard Contractual Clauses (SCCs), however, it cast some doubt over this method of transferring personal data outside the EU.
Read more
