“With the recent publication of their guidance on international personal data transfers (a draft of Recommendation 01/2020 and a final version of 02/2020; November 2020), the European Data Protection Board (EDPB) has provided advice on how such transfers should occur within the framework of the General Data Protection Regulation (GDPR). This was long-awaited, especially since the Court of Justice of the European Union’s (CJEU) seminal judgment in Case C-311/18 (Schrems II) in July 2020, in which the CJEU (yet again) struck down a general mechanism for data transfers to the private sector in the United States (US) (technically, an adequacy decision, called ‘Privacy Shield’) and furthermore declared that the so-called ‘appropriate safeguards’ – a group of legal mechanisms for such transfers (Articles 46-47 GDPR) – might not always be appropriate …” (more)
[Dariusz Kloza and Laura Drechsler, European Law Blog, 9 December]
First posted 2020-12-09 16:42:04
Leave a Reply