See a link here to our article in which we consider the impact on Jersey-based data controllers and processors of the landmark Court of Justice of the European Union (CJEU) case of Data Protection Commissioner v Facebook Ireland Limited, Maximilian Schrems (also known as Schrems II). The CJEU held that the personal data of individuals residing in the EU could be at risk of being accessed and processed by the US government for surveillance purposes in a manner which is incompatible with the privacy rights guaranteed in the EU, and ruled that the Privacy Shield framework between the EU and US can no longer be used as an export mechanism for data transfers.
Action Point
Senior management should be aware of the implications of Schrems II on their business and data privacy risks. A review of what sort of personal data is being transferred and the safeguards in place is advisable. We have teamed up with BDO Jersey to assist our mutual clients navigate this complicated area. Should you wish to learn more about this joint offering please get in touch.