International Data Transfers To The USA: The Privacy Shield Invalidated By The CJEU

The EU-US Privacy Shield, which allowed the transfer of personal data from the European Union to the United States in accordance with the GDPR, was invalidated by the Court of Justice of the European Union on July 16, 2020¹.

A look back at this decision and its impact on data transfers to the United States.

What is the Privacy Shield?

The General European Union Regulation on data protection, known as the General Data Protection Regulation or "GDPR", was adopted on April 14, 2016 and became enforceable on May 28, 2018². It provides that the transfer of personal data to a third country is only possible if this third country ensures an adequate level of protection of these data.