Skip to content
News · noyb - European Center for Digital Rights EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

23 years of illegal data transfers due to inactive DPAs and new EU-US deals

How it connects

Full text

Data Transfers 23 years of illegal data transfers due to inactive DPAs and new EU-US deals In two landmark rulings in 2015 and 2020, the Court of Justice of the European Union (CJEU) declared EU-US data transfers illegal. These decisions are retroactive, which means there was no legal basis for said transfers between the year 2000 and 2023. Nevertheless, most EU companies kept using services like Google Analytics or tracking tools by Meta which entail unlawful data transfers to the USA. A new analysis of noyb's 101 complaints on that matter now shows how a combination of inactive data protection authorities and new deals by the European Commission have lead to 23 years of privacy violations. noyb analysis of 101 complaints 101 complaints from 2020 23 years of illegal transfers. The highest European court sent a strong message for better data privacy, when it invalidated the data transfer deals "Safe Harbor" and "Privacy Shield" in 2015 and 2020 respectively. The logical consequence of

Similar Content