Institution or law · Decision 2000/520 Art. 1(1)
Safe Harbor (invalidated)
In plain English
The 2000 arrangement under which US companies could receive EU personal data by signing up to privacy principles. The EU Court of Justice declared the Commission's decision invalid in October 2015 (Schrems I).
What the law says
For the purposes of Article 25(2) of Directive 95/46/EC, for all the activities falling within the scope of that Directive, the "Safe Harbor Privacy Principles" … are considered to ensure an adequate level of protection for personal data transferred from the Community to organisations established in the United States …
Decision 2000/520 is invalid.
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the Official Journal of the EU is legally binding. The plain-English line is Fino’s own summary, not legal advice.