EU-U.S. Data Privacy Framework - New adequacy decision issued by the European Commission for the transfer of personal data from the EU to the US
The transfer of personal data from the EU to the United States has always been a controversial issue.
On July 12, 2016, the European Commission issued an adequacy decision on the EU-U.S. Privacy Shield Framework, which replaced the previously existing Safe Harbor program.
On July 16, 2020, the European Union Court of Justice (CJEU) invalidated the EU-US Privacy Shield in its decision in Facebook Ireland v. Schrems (Schrems II). The court determined that the Privacy Shield transfer mechanism did not comply with the level of protection required under EU law, focusing on its inability to protect European Economic Area data subject's personal information from the U.S. Government's surveillance powers, as such powers were deriving from national surveillance laws.