17 Nov No personal data in the USA without effective protection
Personal data may only be transferred from Europe to the USA if they are protected there more effectively than before from access by the American security authorities. This follows from a ruling by the European Court of Justice (ECJ) on data transfer from the Irish Facebook subsidiary to the United States. The ECJ objected to the so-called Privacy Shield, i.e. the protective shield agreement agreed between the EU and the USA in 2016, which should serve as a guarantee for a smooth data transfer. According to the ECJ, this protective shield does not provide sufficient protection for EU citizens against surveillance either – as was the case with the Safe Harbor Agreement, which was also overturned by the ECJ.