On the 16th of July 2020, the Court of Justice of the European Union (CJEU) invalidated the US ‘Privacy Shield’ data transfer arrangements. In the same judgement the Court considered Standard Contractual Clauses (SCCs) are still valid for the transfer of personal data to processors established in third countries.
Since the decision was issued, most of the European Union national Data Protection Authorities (DPAs) have released notices of receipt and acknowledgement of the judgement, announcing further investigations and analysis on its practical implications for data transfers.
This note is a review of the current situation in the immediate aftermath of the judgement and presents the official positions of the different DPAs. Whilst this document contains considerations of some of the actions recommended for adoption, it is not legal advice and should not be relied upon as such.
