EDPS Publishes Its Strategy For Union Institutions' Compliance With "Schrems II" Ruling

What is the context of this Strategy?

On July 16 July 2020, the CJEU issued its ruling related to the "Schrems II" case (C-311/18) (the "Schrems II Ruling") invalidating the EU-US Privacy Shield Framework but also affecting the manner in which EU Standard Contractual Clauses may have to be implemented in the future as a safeguard for extra-EEA data transfers¹.

In this context, the EDPS² published a strategy on 29 October 2020 (the "Strategy") in order to ensure that the bodies, offices and agencies of European Union Institutions ("EUIs") comply with the requirements deriving from the Schrems II Ruling. The Strategy's main goal is therefore to ensure that ongoing and future international transfers as implemented by such EUIs comply with applicable data protection regulations³ as read in light of the Schrems II Ruling.