Data Protection Commissioner v Facebook Ireland and Maximillian Schrems (C-311/18): the EU-US Privacy Shield struck down (Case C-311/18, Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems, EU:C:2020:559 (16 July 2020), operative part, point 5)
The Court of Justice has struck down an EU-US adequacy decision before, with immediate effect, and the same ruling kept the standard contractual clauses valid. A holder that sends personal data to a US buyer on the Data Privacy Framework alone should have the clauses ready as a fallback.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-US Privacy Shield is invalid.”
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide