The Court of Justice of the European Union ruled that the EU‑US Privacy Shield is invalid because US surveillance laws conflict with EU fundamental rights. It also held that Standard Contractual Clauses cannot be used by Facebook and similar companies without ensuring no conflict with US law. The judgment affirmed that data protection authorities have a duty to act to enforce the GDPR.
Why it matters: The ruling removes the special legal basis for EU‑US data transfers, forcing companies to rely on other mechanisms and increasing DPA enforcement.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
