The European Union limits the transfer of EU personal data to countries whose privacy regimens are not deemed “adequate,” like the United States. American companies have tended to rely upon Standard Contractual Clauses (SCC)...more
What Happened? On July 16, 2020, in Schrems II, the EU Court of Justice invalidated the EU-U.S. Privacy Shield mechanism. The EU Court of Justice struck down a similar program, the EU-U.S. Safe Harbor, in 2015....more
What Happened? On July 16, 2020, in Schrems II, the EU Court of Justice, invalidated the EU-U.S. Privacy Shield mechanism. The over 5,000 companies that self-certified for Privacy Shield with the U.S. Commerce Department may...more
What is the GDPR?
The GDPR is the European Union’s General Data Protection Regulation, a comprehensive set of strict privacy laws and regulations. The EU passed GDPR in 2016, but granted a two-year grace period which ends...more
What Happened? The highest court in the European Union, the EU Court of Justice, has just invalidated the EU-U.S. Safe Harbor mechanism. Companies can no longer rely on Safe Harbor certification to justify data transfers of...more