Regulatory Watch  /  European Union  /  Enforcement
Moderate impactEnforcementPending

noyb reports 23 years of illegal EU‑US data transfers and limited enforcement actions

The EU Court of Justice invalidated the Safe Harbor and Privacy Shield deals in 2015 and 2020, making all EU‑US data transfers since 2000 illegal. Despite this, most DPAs have not acted on 101 complaints filed by noyb, with only Sweden imposing fines on two companies. The new Trans‑Atlantic Data Privacy Framework has been signed, but its validity remains uncertain.

Why it matters: The analysis highlights ongoing GDPR violations and weak enforcement, underscoring the risk of continued unlawful cross‑border data flows.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
23 years of illegal data transfers due to inactive DPAs and new EU-US deals
noyb · primary source · Aug 14, 2023
Details
JurisdictionEuropean Union
RegulatorEuropean Commission
CourtCourt of Justice of the European Union (CJEU)
LawEU-U.S. Data Privacy Framework
StatusPending
PublishedAugust 14, 2023
Effectivenot stated
OrganisationsGoogle, Meta, Tele2, CDON, Irish Data Protection Commission, Swedish Data Protection Authority
Topicscross border transfer, data brokers, tracking, privacy
Datapersonal