The recent ECJ judgment in Schrems II has shaken up data sharing
arrangements outside the EEA. We look at the impact of the decision
on charities.
The recent case of the European Court of Justice
(“ECJ”) in Schrems
II has thrown the means for lawfully sharing personal data
outside of the EEA up in the air. This case is likely to have a
significant impact on charities which routinely share personal data
with sister organisations outside of the EEA or undertake work
overseas.
Below we look at the case and decision in further detail and
steps charities should be taking to overcome the issues presented
by this judgment. It will be of particular significance to
charities with overseas operations and those who utilise IT
services and servers based outside of the EEA.