DPA and government guidance on ‘Schrems II’

Resource Center / Tools and Trackers / DPA and government guidance on ‘Schrems II’

DPA and government guidance on ‘Schrems II’

This resource tracks DPA and government guidance on 'Schrems II.'


Last updated: September 2021


On July 16, 2020, the Court of Justice of the European Union handed out its decision on Case C311-18 Data Protection Commission vs. Facebook Ireland, Max Schrems. The historic ruling invalidated the EU-U.S. Privacy Shield framework and validated standard contractual clauses with an additional layer of requirements when exporting EU citizens’ data to a third country. The invalidation of Privacy Shield and the additional requirements for SCCs have created uncertainty for organizations using these data transfer mechanisms. In response, data protection authorities and government agencies are publishing initial guidance for how to handle the post-“Schrems II” data transfer world.

This resource tracks DPA and government guidance on 'Schrems II.'

If you are aware of existing DPA or government guidance not yet included on this page, please let us know at research@iapp.org.

DPA and government guidance on ‘Schrems II’