Schrems II – sending data to the US (and other non-EEA countries) is now a major challenge
Businesses which are currently sending data to the US in reliance on the Privacy Shield need urgently to replace those arrangements. The big question is "with what?". The CJEU's recent decision in "Schrems II" means that the alternative route – Standard Contractual Clauses – is open to challenge too.