DPA

EU-27: Invalidation of US-EU data transfer mechanisms in CJEU "Schrems" decisions

Progress

Current status
in force
16 Jul 2020 in force
06 Oct 2015 in force

Scope

Implementers
Austria
Belgium
Bulgaria
Croatia
Cyprus
Czechia
Denmark
Estonia
Finland
France
Germany
Greece
Hungary
Ireland
Italy
Latvia
Lithuania
Luxembourg
Malta
Netherlands
Poland
Portugal
Romania
Slovakia
Slovenia
Spain
Sweden
Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
cross-cutting
Government Branch
judiciary
Government Body
supreme court
Implementation Level
supranational

Timeline of events

16 Jul 2020
in force

Invalidation of U.S.-EU Privacy Shield mechanism in CJEU "Schrems II" decision

The CJEU decision "Schrems II" invalidates the U.S.-EU Privacy Shield while upholding Standard Contractual Clauses as valid and asking Data Protection Agencies to scrutinize the latter.

Source
Event type civil lawsuit
Action type ruling
Government branch judiciary
Government body supreme court
06 Oct 2015
in force

Invalidation of U.S.-EU safe harbor mechanism in CJEU "Schrems I" decision

The CJEU decision "Schrems I" (C-362/14 ) invalidates the U.S.-EU safe harbor framework for data transfers. The main reason for the invalidation is the remaining power of U.S. national supervisory authorities to examine EU–US data transfers

Source
Event type civil lawsuit
Action type ruling
Government branch judiciary
Government body supreme court