Home > Legal articles > Landmark ruling on validity of personal data transfer mechanisms
On 16 July 2020, the Court of Justice of the EU delivered one of the most anticipated decisions on data protection, ruling on the validity of standard contractual clauses. These clauses are widely used legal instruments for transferring personal data outside the European Economic Area (EEA). The court held that the clauses are valid, but that data protection authorities in the EU can prohibit or suspend transfers under these clauses if the third country’s legal system does not provide a level of personal data protection essentially equivalent to that in the EU.
The ruling also addressed the validity of the EU-US Privacy Shield framework, facilitating personal data transfers to the US. The court invalidated Commission Decision 2016/1250 on the adequacy of the protection provided by this mechanism due to the limitations of data protection safeguards in US law in the national security context.
On the one hand, the ruling clarifies the uncertainty surrounding these two mechanisms for personal data transfer, but on the other it marks another watershed in the governance of cross-border transfers to the US.
13 January 2021
China’s new export control regime may affect companies worldwide
17 December 2020
EU Parliament approves new collective redress mechanisms for consumers
17 December 2020
End of financial year: foundations should check their records of payments
17 December 2020
Digital Services Act and Digital Markets Act: Commission flexes its muscles
16 November 2020
China releases long-awaited framework to blacklist “unreliable” foreign entities
16 November 2020
Fake online reviews – back as area of enforcement by competition authorities
12 November 2020
23 October 2020
Privilege of foreign in-house counsel: English court sets standard, Dutch to follow?
15 October 2020
15 July 2020
De Brauw Blackstone Westbroek
Claude Debussylaan 80
1082 MD Amsterdam
The Netherlands
P.O. Box 75084
1070 AB Amsterdam
The Netherlands