The Court of justice of the European Union (CJEU) issued on July 16, 2020 an important ruling with regard to the data transfer regime between the European Union (EU) and the United States of America (USA) in so-called case ‘’Facebook Ireland v Schrems’’, whereby the personal data stored and processed by the United States does not meet the level of security required by the GDPR.
By this ruling, the CJEU invalidates Decision 2016/1250 on the adequacy of the protection provided by so-called ‘’ Privacy Shield’’, which allowed the transference of data between the operators from the EU and the US abide by their data protection principles without further formalities.