CJEU Rules Privacy Shield Invalid and Standard Contractual Clauses Can Remain in Certain Circumstances

Akin Gump published a client alert on the Grand Chamber of the Court of Justice of the European Union (CJEU) in Luxembourg handing down its highly anticipated judgment in a case brought by privacy activist Max Schrems (C-311/18, Data Protection Commissioner v. Facebook Ireland Limited, Maximillian Schrems. The judgment upholds the use of Standard Contractual Clauses but only in certain circumstances, and finds that the EU-U.S. Privacy Shield is an invalid mechanism for transferring personal data from the EU to the U.S. under the General Data Protection Regulation. To read the full alert, click here.