← Back to cases
Case LawSupreme Court
Schrems II (Data Protection Commissioner v. Facebook Ireland)
C-311/18
Data PrivacyTech Law
Jurisdiction
European Union
Date
Jul 16, 2020
Status
Ruling Issued
Source
curia
Court
Court of Justice of the European Union (CJEU)
Date Filed
Jul 16, 2020
Date Decided
Jul 16, 2020
Relevance
98%
Summary
Landmark CJEU ruling invalidating the EU-US Privacy Shield and reshaping international data transfer law.
Holding
The CJEU invalidated the EU-US Privacy Shield framework, finding that US surveillance laws do not provide adequate protection for EU citizens' data. Standard Contractual Clauses remain valid but require case-by-case assessment of the recipient country's legal framework.
Key Facts
Max Schrems challenged Facebook Ireland's transfer of EU user data to US servers. The court found US surveillance programs (FISA 702, EO 12333) incompatible with EU fundamental rights.
Status Timeline
Ruling IssuedCJEU invalidated EU-US Privacy Shield
Citations
- ECLI:EU:C:2020:559