EU court invalidates data transfer agreements with the US

The European Union’s top court ruled on Thursday has ruled that an agreement with the US allowing for the transfer of personal data outside the bloc is invalid because of surveillance concerns.

The EU top court upheld, however, that the transfer of data to any other third country which “ensures an adequate level of data protection,” is valid.

In the ruling, the court stressed that personal data transferred outside the bloc must be “afforded the level of protection essentially equivalent to that guaranteed within the EU by the GDPR [General Data Protection Regulation].”