Share on LinkedInShare on LinkedIn

ARTICLE · 27 JULY 2020

Déjà-vu - Schrems Strikes Again: Privacy Shield Is Invalid

Gowling WLG
Gowling WLG
Contributor
Gowling WLG

Gowling WLG

The firm The firm’s lawyers speak English, French, Russian and Ukrainian. The firm’s client base...

View firm profile
Explore more from Gowling WLG

The Court of Justice of the European Union (CJEU) ruled on 16 July 2020 that the EU-US Privacy Shield is invalid as a mechanism for transferring personal data to third parties in the US.

United KingdomPrivacy

What just happened?

The Court of Justice of the European Union (CJEU) ruled on 16 July 2020 that the EU-US Privacy Shield is invalid as a mechanism for transferring personal data to third parties in the US.

If that sounds all too familiar, that is because there was a similar decision five years ago when the previous EU-US transfer mechanism, known as the Safe Harbour Decision, was also found to be invalid.

The Information Commissioner's Office (ICO) is considering the CJEU's judgement to support organisations with international data flows. Watch this space for further guidance, and potentially an alternative scheme to replace the Privacy Shield. However, given the CJEU's comments about the ability of US intelligence agencies to harvest data through the sub-sea cables that form the backbone of the internet, we may not see a revitalised Privacy Shield for some time to come.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from