France: CNIL states that it will carry out in-depth analysis of Schrems II judgment to assess impact for US transfers
The French data protection authority ('CNIL') issued, on 17 July 2020, a statement on the Court of Justice of the European Union's ('CJEU') judgment in Data Protection Commissioner v. Facebook Ireland Limited, Maximillian Schrems (C-311/18) ('the Schrems II Case'). In particular, CNIL noted that the judgment invalidated the Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the Adequacy of the Protection provided by the EU-US Privacy Shield and validated the use of Standard Contractual Clauses ('SCCs') for transfers outside the EU. In relation to the same, CNIL highlighted that it is currently carrying out an in-depth analysis of the Schrems II judgment in collaboration with European data protection authorities during the European Data Protection Board ('EDPB') meeting, with the aim of determining the consequences for data transfers from the EU to the US.
You can read the press release, only available in French, here.