The Austrian data protection authority deemed the transfer of personal data to the United States performed through Google Analytics to breach the GDPR.
After the failure of Safe Harbor and Privacy Shield, the EU and US sit again at the negotiation table to negotiate a new agreement aimed at avoiding the blockage of personal data transfers from the EU to the US, establishing new policies for transatlantic data transfers.
This infographic outlines the steps to be taken by any organization for a personal data transfer assessment in the light of the Schrems II case, the position of the European data protection board, and the new Standard Contractual Clauses.
A data transfer impact assessment to review compliance with the criteria outlined in the Schrems II decision is a pillar of the GDPR accountability program of any business.
A data transfer impact assessment methodology to evaluate compliance with the criteria outlined in the Schrems II decision is a pillar of the GDPR accountability program of any business.ย
The Swedish data protection authority issued a GDPR fine for lack of adequate protection of sensitive data stored in an American cloud platform after the Schrems II decision.
The EDPB issued its recommendations on how to deal with transfers of personal data outside the EEA after the Schrems II case, which have a major impact on any business.