On July 16, 2020, the Court of Justice of the European Union (CJEU) implemented a landmark ruling in case C-311/18 — Data Protection Commissioner v Facebook Ireland and Maximillian Schrems (more commonly referred to as ‘‘Schrems II’’). While it concluded that Standard Contractual Clauses (SCCs) issued by the European Commission for the transfer of personal data to data processors established outside of the European Union (EU) are still valid, the court invalidated the EU-US Privacy Shield Framework.
This Flash Report explains what the invalidation means for U.S. businesses with EU interests and provides additional clarity on how organizations can prepare for this situation.