Institution or law · Decision 2016/1250 Art. 1(1)
EU-US Privacy Shield (invalidated)
In plain English
The 2016 successor to Safe Harbor for sending personal data to certified US companies. The EU Court of Justice declared it invalid in July 2020 (Schrems II) because of US surveillance law.
What the law says
For the purposes of Article 25(2) of Directive 95/46/EC, the United States ensures an adequate level of protection for personal data transferred from the Union to organisations in the United States under the EU-U.S. Privacy Shield.
Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-US Privacy Shield is invalid.
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the Official Journal of the EU is legally binding. The plain-English line is Fino’s own summary, not legal advice.