EU court ruling raises questions over cross-border data transfer mechanisms

Last week’s “Schrems II” ruling by the Court of Justice of the European Union invalidated the “Privacy Shield” arrangements which are used as the legal basis for some transfers of personal data from the EEA to the US. With broader significance, the decision has also highlighted the limitations applicable under GDPR to other methods for transferring personal data to countries outside the EEA, such as Standard Contractual Clauses.

Jagvinder Singh Kang, our International Head of IT Law considers these issues further in this article, and at a webinar on Thursday 30 July.

Our content explained

Every piece of content we create is correct on the date it’s published but please don’t rely on it as legal advice. If you’d like to speak to us about your own legal requirements, please contact one of our expert lawyers.

Posted by


Mills & Reeve Sites navigation
A tabbed collection of Mills & Reeve sites.
My Mills & Reeve navigation
Subscribe to, or manage your My Mills & Reeve account.
My M&R


Register for My M&R to stay up-to-date with legal news and events, create brochures and bookmark pages.

Existing clients

Log in to your client extranet for free matter information, know-how and documents.


Mills & Reeve system for employees.