In its judgment of 6 October 2015 (C-362/14), the Court of Justice of the European Union (“CJEU”) held that transfers of personal data of European citizens to the United States made under the so-called Safe Harbor scheme are subject to significant risks, and declared the corresponding decision of the European Commission to be invalid. As a consequence, EU entities of U.S. companies so far relying on Safe Harbor will need to revise their practice of submitting personal data to the U.S. to comply with EU data protection law.
Continue Reading Redefining Data Protection? Court of Justice of the European Union Strikes Down the Commissions “Safe Harbor” Decision