23 Jul I HAVE PERSONAL DATA FROM MY CUSTOMERS IN THE CLOUD WITH A COMPANY IN THE UNITED STATES (GOOGLE), SHOULD I WORRY?
Well, for now, you do have to worry until further news. Since July 16, 2020, the Court of Justice of the European Union (CJEU) has invalidated the Privacy Shield convention, saying by a Judgment that membership of that platform by U.S. companies (as is the case with Google, Amazon, Microsoft, Apple, Dropbox, facebook, etc.) does not guarantee that European rules on the protection of personal data are being complied with. As long as it has also been ruled in that Judgment that the Model Clause on privacy normally offered to the consumer by such companies remains valid, it is also true that the now-invalidated Privacy Shield was ultimately the mechanism that gave assurances about the effective application in all cases of such model clauses. The reasons for the CJEU invalidating Privacy Shield are in a very simplified summary sufficient reason why the existence of a model clause between the American companies cited and us is not a full guarantee. We’ll keep reporting.
Maybe it’s time to migrate to other platforms? (see German company TeamDrive)