The Privacy Shield: Update on the state of play of the EU-US data

The CJEU’s Schrems judgment of October 2015, besides declaring the European Commission’s Decision on the EU-US ‘Safe Harbour’ data transfer regime invalid, has also settled a number of crucial requirements corresponding to the foundations of EU data protection. In less than one year from the CJEU ruling, the Commission had adopted a new adequacy decision in which the new framework for EU-US data transfer, the Privacy Shield (2016), is deemed to adequately protect EU citizens. The main improvements of the Privacy Shield (over its predecessor), as well as the critical reactions to the new arrangements, are discussed in this paper. The first joint annual review took place in September 2017 on which both the Commission and Article 29 Working Party issued their own reports. Although progress is recognised, a number of concerns remain and new challenges to the Privacy Shield have arisen, among others, from the Facebook/Cambridge Analytica scandal, as pointed out by the European Parliament in its recent resolution.
The CJEU’s Schrems judgment of October 2015, besides declaring the European Commission’s Decision on the EU-US ‘Safe Harbour’ data transfer regime invalid, has also settled a number of crucial requirements corresponding to the foundations of EU data protection. In less than one year from the CJEU ruling, the Commission had adopted a new adequacy decision in which the new framework for EU-US data transfer, the Privacy Shield (2016), is deemed to adequately protect EU citizens. The main improvements of the Privacy Shield (over its predecessor), as well as the critical reactions to the new arrangements, are discussed in this paper. The first joint annual review took place in September 2017 on which both the Commission and Article 29 Working Party issued their own reports. Although progress is recognised, a number of concerns remain and new challenges to the Privacy Shield have arisen, among others, from the Facebook/Cambridge Analytica scandal, as pointed out by the European Parliament in its recent resolution.

Why Trump's administration is going after Europe's privacy rules – POLITICO

Why the EU-U.S. Privacy Shield Was Invalidated - TermsFeed

UPDATE: Strengthening American Cybersecurity Act of 2022 Signed Into Law - Lewis Brisbois Bisgaard & Smith LLP

The EU-US Data Privacy Framework: A new era for data transfers?

Mobile App Privacy Policy Template & Examples

Privacy Shield 2.0' nearer for EU-US data transfers after Biden order

New adequacy decision: EU-US Data Privacy Framework adopted - Lexology

EU-U.S. data flows deal: game changer or more legal uncertainty? – POLITICO

Europe's top court strikes down flagship EU-US data transfer mechanism

EU, US agree on data transfer deal to replace defunct Privacy Shield

GDPR Takes Down EU-US Privacy Shield

The invalidation of Privacy Shield and the status of EU-US data transfers

Privacy Shield: The Fast Track to Your EU-US DPF Certification