Data Protection Commissioner v. Facebook Ireland and Maximillian Schrems

The Court of Justice of the EU (CJEU) issued a judgement in the case C-311/18 Data Protection Commissioner v Facebook Ireland and Maximillian Schrems (known as the ‘Schrems II case’) stating that it invalidates Decision 2016/1250 on the adequacy of the protection provided by the EU-US Privacy Shield and considers the Commission Decision 2010/87 on standard contractual clauses for the transfer of personal data to processors established in third countries as valid.