Privacy Shield and the GDPR: Inadequate Protection for Cross-border Data Transfers

On July 16, 2020, the Court of Justice of the European Union (CJEU) issued a landmark judgement that Privacy Shield is “invalid” because it does not provide “adequate protection” under Article 45 of the General Data Protection Regulation (GDPR) for transfers of personal data of individuals located in the European Union to the United States. Continue reading “Privacy Shield and the GDPR: Inadequate Protection for Cross-border Data Transfers”