Case C-311/18: Data Protection Commissioner v Facebook Ireland & Schrems (Schrems II)

This case concerns the validity of the EU-US Privacy Shield framework for transferring personal data between the EU and the US. The Court of Justice of the European Union (CJEU) ruled that the framework is invalid due to US surveillance laws potentially infringing EU citizens' fundamental rights.

This decision impacts businesses relying on the Privacy Shield for data transfers, requiring them to find alternative legal bases. It affects millions of individuals whose data is transferred across the Atlantic, reinforcing data protection standards.