Transfers of personal data outside of the EU/EEA: What impact has the Schrems II judgement had on international data transfers?
On the 8th of March 2023, Ane Rode and Torodd Aastorp, who are both associates at the law firm Føyen, will hold a guest lecture on the course JUS294-2-A Privacy and data protection - GDPR.
Main content
In principle, transfer of personal data to a third country is prohibited. However, there are some exceptions to this rule. A transfer can take place if the conditions laid down in the provisions of the GDPR relating to the transfer of personal data to third countries are complied with by the controller or the processor. The GDPR provides different transfer mechanisms for transfers of personal data from the EEA to a third country. In the Schrems II judgement handed down by the Court of Justice of the European Union (CJEU) on 16 July 2020, the CJEU declared that the transfer mechanism Privacy Shield was no longer lawful. The Schrems II judgement has had significant impact on international data transfers. Rode and Aastorp will discuss how the judgement has affected transfers of personal data to third countries since July 2020, including the use of the transfer mechanism Standard Contractual Clauses. The title of the guest lecture is "Transfers of personal data outside of the EU/EEA; What impact has the Schrems II judgement had on international data transfers?".
Ane Rode is affiliated with Føyen’s TMT department. She assists Norwegian and international companies with contractual and regulatory advice in connection with technology and digitalisation, privacy and cyber security as well as marketing. Rode graduated from the University of Bergen where she wrote her master thesis on who is responsible for personal data on a blockchain.
Torodd Aastorp is affiliated with Føyen’s TMT department. He works mainly with privacy and IT legal issues, IT agreements and procurement, as well as intellectual property law. Torodd graduated from the University of Bergen, where he wrote his master thesis on a risk-based approach to the requirements for the transfer of personal data to states outside the EU / EEA, in light of the Schrems II judgment.
All our students, and other persons interested in data protection and the GDPR, are warmly welcomed to join the guest lecture. Follow the link on the right to register for participation. After registering, you will receive a confirmation email containing information about joining the meeting. The link you will receive is your personal link and it will not work if shared with other persons.
