Insights & news

Court of Justice of European Union Invalidates EU-US Privacy Shield

  • 23/07/2020
  • Articles

On 16 July 2020, the Court of Justice of the European Union (CJEU) delivered its judgment in the Facebook Ireland and Schrems case (C-311/18, Schrems II case). The CJEU invalidated Decision 2016/1250 on the adequacy of the protection provided by the EU-US Privacy Shield. The CJEU ruled that the EU-US Privacy Shield does not provide adequate protection and can therefore no longer serve as a legal instrument permitting the transfer of personal data from the EU to the US. As a result, transfers of personal data between the EU and the US that rely on the EU-US Privacy Shield are now illegal. However, the CJEU considered that Commission Decision 2010/87 on standard contractual clauses (SCCs) for the transfer of personal data to processors established in third countries is valid and can be relied upon, provided that the applicable legislation does not prevent the recipient from complying with its contractual obligations under the SCCs.

Please click below to read a note summarizing the CJEU's judgment.

Key contacts

Related practice areas

Related insights

Sign up for updates
    • 19/10/2020
    • Newsletters

    VBB on Belgian Business Law, Volume 2020, No. 9

    The September 2020 issue of our Belgian Business Law newsletter reporting on the latest developments in a range of areas, including competition, data protection, intellectual property and labour law

    Read more
    • 14/10/2020
    • News

    CJEU on Access and Retention of Traffic and Location Data for National Security

    On 6 October 2020, the Court of Justice of the European Union (CJEU) handed down judgments in three cases on the compatibility of the ePrivacy Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector with methods for combating terrorism (Case C-623/17, Privacy International, as well as Joined cases C-511/18, La Quadrature du Net and Others, C-512/18, French Data Network and Others, and Case C-520/18, Ordre des barreaux francophones et germanophone and Others). These judgments may require Member States to review their legislation to balance national security with the fundamental rights of its citizens. In addition, these judgments could have an impact on EU-UK data flows post-Brexit… Please click below to read our note on these CJEU judgments.

    Read more
    • 21/09/2020
    • Newsletters

    VBB on Belgian Business Law, Volume 2020, No. 8

    The August 2020 issue of our Belgian Business Law newsletter reporting on the latest developments in a range of areas, including competition, data protection, intellectual property and labour law

    Read more

Subscribe to our updates

Please select the practice areas you are interested in: *