Alston and Bird

Roughly three years after the Schrems II case invalidated Privacy Shield overnight – and with it the legal basis for data transfers between Europe and the US – the European Commission adopted its “adequacy decision” for the EU-US Data Privacy Framework.