--- title: European Court of Justice at an Impasse with US Over Privacy Shield description: GDPR protects the data rights of EU citizens while Privacy Shield agreement did not protect the data of EU citizens adequately from US surveillance. image: https://insights.comforte.com/hubfs/European%20Court%20of%20Justice%20data_v1.4.jpg --- [![Hubspot_blog_logo](https://insights.comforte.com/hs-fs/hubfs/Hubspot_blog_logo.png?width=295&name=Hubspot_blog_logo.png)](http://www.comforte.com) [![Subscribe](https://no-cache.hubspot.com/cta/default/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0) [![European Court of Justice on Privacy Shield ](https://insights.comforte.com/hubfs/European%20Court%20of%20Justice%20data_v1.4.jpg)](https://insights.comforte.com/european-court-of-justice-at-an-impasse-over-data-privacy-with-us-law) [Thomas Stoesser](https://insights.comforte.com/author/thomas-stoesser) l Jul 28, 2020 l [GDPR](https://insights.comforte.com/tag/gdpr), [Data Protection](https://insights.comforte.com/tag/data-protection), [Compliance](https://insights.comforte.com/tag/compliance) # European Court of Justice at an Impasse with US Over Privacy Shield You might have recently seen that the European Court of Justice (ECJ) put an end to a digital trade agreement involving the transfer of EU data to the United States. This move was due to surveillance fears and concerns over the lack of privacy standards that currently operate within the US. Judges expressed that the [Privacy Shield](https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/eu-us-data-transfers_en) agreement did not protect the data of EU citizens adequately from US surveillance in the same way EU law demands. Over the course of the past two decades, data has been flowing freely between the EU and US, which has been fruitful for those on both sides of the Atlantic and previously had the backing of the European Commission. However, the ECJ ruling to invalidate the EU-US Privacy Shield agreement has put all digital trade of data in jeopardy and left over 5,300 US-based companies unsure of how to proceed. The [court stated](https://noyb.eu/files/CJEU/judgment.pdf): *“The limitations on the protection of personal data arising from the domestic law of the United States, on the access and use by US public authorities of such data transferred from the European Union... are not circumscribed in a way that satisfies requirements that are essentially equivalent to those required under EU law.”* Data privacy and security of EU citizens is of paramount importance and hence the reason for the formation of the European General Data Protection Regulation ([GDPR](https://insights.comforte.com/gdpr-2-years-on?hsLang=en)) - it protects the data rights of European citizens but extends to any organisation that collects, stores, or uses EU citizen data. So, with the ECJ raising this serious concern, it is a promising start to demanding further reforms in how data is distributed. ![41373165_403](https://insights.comforte.com/hs-fs/hubfs/41373165_403.jpg?width=442&name=41373165_403.jpg) ## Impact on businesses  What does this mean for the thousands of organisations that depend on this data? At this stage, the main alternative for enterprises wishing to transfer data to the US is to use Standard Contractual Clauses ([SCCs](https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en)), which are non-negotiable legal contracts drawn up by Europe, and are used in other countries besides the US. These have been used frequently, and following the ruling, [Microsoft released a statement](https://blogs.microsoft.com/eupolicy/2020/07/16/assuring-customers-about-cross-border-data-flows/) that the company uses SCCs. But the impact of data-sharing agreements is far-reaching and deep rooted, affecting not just social media companies, but banks, law firms and many other types of companies. With Privacy Shield now defunct, it will be interesting to see how US and EU regulators form a plan to create a workable data-sharing framework or mechanism. --- | Share this:  | [![LinkedIn](https://insights.comforte.com/hubfs/Social%20Icons/linkedin%20icon.png)](https://www.linkedin.com/shareArticle?mini=true&url=https://insights.comforte.com/european-court-of-justice-at-an-impasse-over-data-privacy-with-us-law&utm_medium=social&utm_source=linkedin) | [![Bluesky](https://insights.comforte.com/hubfs/Social%20Icons/bluesky_logo.png)](https://bsky.app/intent/compose?url=https://insights.comforte.com/european-court-of-justice-at-an-impasse-over-data-privacy-with-us-law&utm_medium=social&utm_source=Bluesky) | ![Twitter](https://insights.comforte.com/hubfs/Social%20Icons/twitter_x_logo-1.png) | [![XING](https://insights.comforte.com/hubfs/Social%20Icons/xing-color2.png)](https://www.xing.com/spi/shares/new?url=https://insights.comforte.com/european-court-of-justice-at-an-impasse-over-data-privacy-with-us-law&utm_medium=social&utm_source=xing) | [![Email](https://insights.comforte.com/hubfs/Social%20Icons/email%20icon.png)](mailto:?subject=Check%20out%20https://insights.comforte.com/european-court-of-justice-at-an-impasse-over-data-privacy-with-us-law&utm_medium=social&utm_source=email%20&body=Check%20out%20https://insights.comforte.com/european-court-of-justice-at-an-impasse-over-data-privacy-with-us-law&utm_medium=social&utm_source=email) | | --- | --- | --- | --- | --- | --- | ## The Choice is Yours: Adopt Data-centric Security or Risk GDPR and PCI Non-Compliance Are you considering data-centric security for protecting personal data but need help convincing others at your organisation? Click the button below to get a white paper from the cybersecurity experts at CyberEdge that explains in depth how data-centric security reduces [compliance](https://www.comforte.com/enterprise-data-protection/compliance/) scope and minimizes the risks of a data breach. [![Download White Paper](https://no-cache.hubspot.com/cta/default/4026697/42e934f9-22e2-46a9-8cce-b57f766662d1.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/42e934f9-22e2-46a9-8cce-b57f766662d1) ### Related posts ![OpenAI’s GDPR Travails Demonstrate Need for Data Security-by-Design](https://insights.comforte.com/hubfs/comforte%20AG_blog%20post_AI.png) Apr 6, 2023 l [GDPR](https://insights.comforte.com/tag/gdpr) , [Data Protection](https://insights.comforte.com/tag/data-protection) , [Compliance](https://insights.comforte.com/tag/compliance) , [Big Data Analytics](https://insights.comforte.com/tag/big-data-analytics) , [AI](https://insights.comforte.com/tag/ai) ### [OpenAI’s GDPR Travails Demonstrate Need for Data Security-by-Design](https://insights.comforte.com/openais-gdpr-travails-demonstrate-need-for-data-security-by-design?hsLang=en) After several weeks of incredible growth, OpenAI has come in for a bumpy ride of late. First it revealed details of a data breach exposing a significant number of ChatGPT subscribers. Then the Italian data protection regulator (GPDP) became the... [Read more](https://insights.comforte.com/openais-gdpr-travails-demonstrate-need-for-data-security-by-design?hsLang=en) ![How to Stay Agile and Compliant with Format-preserving Protection for Analytics](https://insights.comforte.com/hubfs/Analytics%20on%20Red%20Button%20Enter%20on%20Black%20Computer%20Keyboard..jpeg) Aug 4, 2022 l [GDPR](https://insights.comforte.com/tag/gdpr) , [PCI DSS](https://insights.comforte.com/tag/pci-dss) , [Compliance](https://insights.comforte.com/tag/compliance) , [Big Data Analytics](https://insights.comforte.com/tag/big-data-analytics) , [CCPA](https://insights.comforte.com/tag/ccpa) ### [How to Stay Agile and Compliant with Format-preserving Protection for Analytics](https://insights.comforte.com/how-to-stay-agile-and-compliant-with-format-preserving-protection-for-analytics?hsLang=en) Cloud-based analytics offer a truly transformative opportunity for global organizations. By extracting insights from data, they are already helping companies better serve their customers, improve operational efficiencies and make better business... [Read more](https://insights.comforte.com/how-to-stay-agile-and-compliant-with-format-preserving-protection-for-analytics?hsLang=en) ![17 Countries with GDPR-like Data Privacy Laws](https://insights.comforte.com/hubfs/Int_Datenschutz_Strategie_1.png) Jan 13, 2022 l [GDPR](https://insights.comforte.com/tag/gdpr) , [Data Protection](https://insights.comforte.com/tag/data-protection) , [Compliance](https://insights.comforte.com/tag/compliance) , [CCPA](https://insights.comforte.com/tag/ccpa) ### [17 Countries with GDPR-like Data Privacy Laws](https://insights.comforte.com/countries-with-gdpr-like-data-privacy-laws?hsLang=en) GDPR wasn't the beginning and it certainly won't be the end. Strict data privacy legislation with extraterritorial applicability is appearing in more and more economies across the globe, meaning the list of “GDPR-free” havens is growing shorter by... [Read more](https://insights.comforte.com/countries-with-gdpr-like-data-privacy-laws?hsLang=en) ### Service - [Contact](https://www.comforte.com/contact/) - [About us](https://www.comforte.com/company/) - [Blog](https://insights.comforte.com/) - [Press Releases](https://www.comforte.com/company/press-releases/) - [Career](https://www.comforte.com/company/career/) - [Resources](https://www.comforte.com/resources/) ### Germany comforte AG Abraham-Lincoln-Str. 22 65189 Wiesbaden Germany Phone: + 49 611 93199 00 Fax: + 49 611 93199 05 ### Australia comforte PTY Suite 20, 1 Rivett Road North Ryde NSW 2113 Australia Postal Address: PO Box 1710 Lane Cove NSW 1595 Australia Phone: +61 2 8197 0272 ### USA comforte Inc. 30 Wall Street, 8th Floor New York, NY 10005-2205 USA Phone: +1-646-438-5716 ### Singapore comforte Asia Pte. Ltd. 1 Raffles Place, #19-61 Tower 2  Singapore 048616 Phone: +65 6808 5507 - [Sitemap](https://www.comforte.com/sitemap/) - [Legal Notice](https://www.comforte.com/legal-notice/) - [Privacy Policy](https://www.comforte.com/privacy-policy/) © comforte AG 2026