On June 18, 2021 the European Data Protection Board (the assembly of European data protection authorities) published its recommendations on supplementary measures to be applied to ensure compliance with the GDPR for data transfers outside the European Union.
Compliance & regulations
Schrems 2: final recommendations on supplementary measures
Cloud Act, FISA, ... why the Privacy Shield is now invalid?
On July 16, 2020, the CJEU ruled that the Privacy Shield that regulated transfers between the EU and the US does not comply with the GDPR, making it illegal to transfer personal data to the US without strict precautions.