The European Union’s top court ruled on Thursday has ruled that an agreement with the US allowing for the transfer of personal data outside the bloc is invalid because of surveillance concerns.
The EU top court upheld, however, that the transfer of data to any other third country which “ensures an adequate level of data protection,” is valid.
#ECJ: the Decision on the adequacy of the protection provided by the EU-US Data Protection Shield is invalidated, but @EU_Commission Decision on standard contractual clauses for the transfer of personal data to processors established in third countries is valid #Facebook #Schrems pic.twitter.com/BgxGAvuq3T
— EU Court of Justice (@EUCourtPress) July 16, 2020
In the ruling, the court stressed that personal data transferred outside the bloc must be “afforded the level of protection essentially equivalent to that guaranteed within the EU by the GDPR [General Data Protection Regulation].”