One month after the cancellation of the data treaty between the EU and the US, privacy activist Max Schrems is taking websites to Court that still send data to the US.
Schrems and his foundation have filed a complaint with the European privacy committees against 101 European websites.
According to the indictment, these sites still send data from EU citizens to the United States, mostly through services like Google and Facebook. However, there is no legal basis for this without a data agreement.
Until recently, data transfers between the EU and the US were governed by an agreement called Privacy Shield. That treaty was cancelled in mid-July because according to the European Court it does not provide enough protection.
Under the GDPR rules, companies may only send data of EU citizens to other legal regions if they receive the same guarantees of protection as in our region.
In the lawsuit, filed by Schrems, the Court concluded that Privacy Shield does not provide those guarantees sufficiently.
The treaty thus expired, and with that data, transfers had to stop immediately, without a transition period, according to the European data protection authority the EDPB.
