Published: July 2020

Contributors: Amy de La Lama, Elisabeth Dehareng, Lothar Determann, Michael Egan, Lukas Feiler, Joanna de Fonseka, Francesca Gaudino, Brian Hengesbaugh, Julia Kaufmann, Brandon Moseberry, Michaela Nebel, Wouter Seinen, Florian Tannen, Harry Valetk

In response to the Court of Justice of the European Union’s historic ruling July 16, 2020, on the so-called “Schrems II” court case, members from Baker McKenzie shared a series of guidance notes on what the decision means for companies that rely on EU-U.S. Privacy Shield, controller-to-processor standard contractual clauses, SCCs for transfers to controllers, derogations/exceptions to transfer restrictions, and binding corporate rules, as well as for Brexit and what companies can expect with the road ahead on these issues.

• Part 1: What Privacy Shield organizations should do
• Part 2: Controller-to-processor SCCs
• Part 3: Data transfers and Brexit
• Part 4: Impact on controller-to-controller SCCs
• Part 5: BCRs as a robust alternative
• Part 6: Impacts on companies that rely on derogations
• Part 7: Technology, media and telecommunications services
• Part 8: Predictions for the road ahead after ‘Schrems II’