You’ve put GDPR to bed, then you wake up with Schrems II…
Picture this: the CJEU (Court of Justice of the European Union) has invalidated the EU-US Privacy Shield with immediate effect, meaning companies can no longer transfer personal data to the US on the basis of Privacy Shield.