The EU Recommends Supplemental Measures to Protect Personal Data in Cross-Border Data Transfers
In the past month, the European Data Protection Board (EDPB) has provided insight into its interpretation of the EU Court of Justice (ECJ) decision in Schrems II in July 2020. As a brief recap, in Schrems II, the ECJ held that the EU-US Privacy Shield, the mechanism to lawfully transfer personal data from the EU to the US, was invalid.The ECJ did uphold the continued use of Standard Contractual Clauses (SCCs) as a mechanism to continue to transfer personal data outside of the European Union (EU), but, with a caveat: