11/12/2020

EDPB recommendations for third country transfers published

On November 10^th 2020, the European Data Protection Board (EDPB) published recommendations that supplement transfer tools to so-called third countries outside the EU and the EEA. On July 16^th 2020, the ECJ ruled that the transfer of personal data on the basis of the EU-US Privacy Shield is not permissible and that users must carry out their own effectiveness test when using EU standard contractual clauses. In the decision, the ECJ also clarified that data transfers to the USA are no longer possible solely on the basis of EU standard contractual clauses. This poses considerable problems for companies and organizations.