Data protection – ECJ decision upholds EU standard contractual clauses but not Privacy Shield
In the recent decision of Data Protection Commissioner v Facebook Ireland and Maximillian Schrems the European Court of Justice (“ECJ”) upheld Commission Decision 2010/87 that controller to processor standard contractual clauses (“SCCs”) are valid but the EU-US Privacy Shield (“Privacy Shield”) is invalid.