The Court of Justice of the European Union (CJEU) ruled last week on the Schrems II case, and invalidated the Privacy Shield agreement by which the United States and the European Union regulate transatlantic flows of personal data for commercial purposes. While the judgment appears to apply only to a specific subset of personal data and only to E.U.-U.S. data flows, its implications are global.
The ruling doesn’t affect all data
The court’s July 16 ruling limits transfer to the United States of E.U. citizens’ “personal data,” not other data flows. Within this category of personal data, the judgment is further limited, as it does not apply to “necessary” data transfers to the United States, such as emails or online travel or hotel bookings.… Seguir leyendo »