Privacy Shield

Privacy Shield Invalidation of the US-EU Privacy Shield framework

On July 16, 2020, the Court of Justice of the European Union issued a ruling that invalidated the US-EU Privacy Shield framework.

Privacy Shield had before this ruling been used as a guarantee that any personal data transmitted or processed by a US-based sub-contractor had the correct safeguard in place to comply with GDPR and privacy laws and regulations.

Court of Justice of the European Union also in the same ruling upheld Standard Contractual Clauses (SCCs) or Binding Corporate Rules (BCRs) as a valid data transfer mechanism.

Invajo takes Privacy and Compliance seriously and whenever Invajo uses any sub-contractor that might transfer and/or process personal data outside of EU/EES Invajo ensures that the correct safeguards are in place.

Invajo has binding SCCs with all its sub-contractors who transfer and/or process data outside of the EU/EES area.