Q&A: Guidance on transatlantic data transfers following the Schrems ruling (European Commission)

(Source: European Commission) What was the Safe Harbour arrangement? The 1995 EU Data Protection Directive sets out rules for transferring personal data from the EU to non-EU countries. Under these rules, the Commission may decide that a non-EU country ensures an 'adequate level of protection'. These decisions are commonly referred to as 'adequacy decisions'. On the basis of the 1995 Data Protection Directive, the European Commission, on 26 July 2000, adopted a Decision (the 'Safe Harbour decision ') recognising the 'Safe Harbour Privacy Principles' issued by the Department of Commerce of the United States, as providing adequate protection for the purposes of personal data transfers from the...