The CNPD And The Decision That Invalidated Safe Harbor

 On 23 January 2015, the Portuguese National Data Protection Agency (Comissão Nacional de Proteção de Dados – "CNPD") issued a communication with its guidelines on the impact of the judgment of 6 October 2015 of the Court of Justice of the European Union ("CJEU") on authorisations to transfer data to the United States of America issued under the Safe Harbor agreement.

In its judgement, the CJEU decided that the transfer of data to the USA on the basis of the Safe Harbor agreement does not guarantee an adequate level of protection equivalent to that in the European Union. For this reason, it declared that European Commission Decision 2000/520/CE of 26 June 2000 is invalid.

You can read our commentary on the CJEU decision here.