Companies can't say how they comply with CJEU ruling

Data Transfers Opening Pandora’s Box: Companies can't say how they comply with CJEU ruling Following the Court’s judgment in Case-C-311/18 (“Schrems II”) on the Privacy Shield and Standard Contractual Clauses, the noyb team and some of our members reached out to 33 companies and services that they use on a personal basis to ask them how they were approaching international data transfers. The responses that we received ranged across the spectrum: from good, to bad, to shocking. We’ve now compiled a report for the public that details these responses. Scroll through the collected responses from companies in this 45-page report (PDF) spanning from Airbnb to Zoom Check out the press release (PDF) After the CJEU ruled on EU-US data transfers for the second time (after the end of "Safe Harbor" in 2015), we were wondering if companies are now better equipped to deal with the GDPR's rules on international data transfers. Users have a right to get detailed information, where their data was sent.