EU-US Privacy Shield declared invalid

In a long-awaited decision, the Court of Justice of the European Union (CJEU) has invalidated the EU-US Privacy Shield, a framework governing data transfers between the EU and the US. Good news, however, the transfer of personal data based on standard contractual clauses is still allowed.