The EU-US Data Privacy Framework and the Schrems Saga: Is there Light at the End of the Tunnel?

Jan Helge Brask Pedersen

doi:10.5771/1435-439X-2024-2-213

Contents
- Chapter Expand | CollapseAuthorsPage
- 147–148 Titelei/Inhaltsverzeichnis 147–148
- 149–181 Alle Macht der EU-Kommission: Ist die zentralisierte Durchsetzung des Digital Markets Acts alternativlos? Theresa Mainusch Theresa Mainusch 149–181
- 182–212 The Dawn of Regulated AI: Analyzing the European AI Act and its Global Impact Kalojan Hoffmeister Kalojan Hoffmeister 182–212
- 213–240 The EU-US Data Privacy Framework and the Schrems Saga: Is there Light at the End of the Tunnel? Jan Helge Brask Pedersen Jan Helge Brask Pedersen 213–240
- 241–261 EU FDI Screening – Level Up in Multilevel Governance? Alexia Crivoi Alexia Crivoi 241–261
Durchsuchen Sie das Werk
Geben Sie ein Keyword in die Suchleiste ein
CC-BY Access

ZEuS Zeitschrift für Europarechtliche Studien , page 213 - 240

The EU-US Data Privacy Framework and the Schrems Saga: Is there Light at the End of the Tunnel?

Autoren

Jan Helge Brask Pedersen

DOI
- doi.org/10.5771/1435-439X-2024-2-213
- ISSN: 1435-439X
- ISSN online: 2942-3589
Abstract

The article examines the legal framework for data transfers from the EU to the US. In the judgements known as Schrems I and II, the CJEU invalidated the two former US adequacy decisions on the grounds that they did not satisfy the requirements in Art. 45 GDPR. On 10 July 2023, the European Commission adopted a new US adequacy decision. The question that is examined in this article is whether the new adequacy decision is compatible with Art. 45 GDPR. According to the CJEU’s interpretation of this provision in Schrems I and II, third countries must provide a level of data protection that is “essentially equivalent” to the EU. This requires the US to comply with all relevant fundamental rights in the Charter and in the ECHR. Based on an assessment of US law, the article concludes that it is doubtful that the latest US adequacy decision fulfils the requirements in Art. 45 GDPR and that it is likely that the CJEU – once it is confronted with the question – will invalidate the adequacy decision of July 2023.
Share