Last week’s decision of the European Court of Justice in Schrems v. Data Protection Commissioner, C-362/14 deemed invalid an important self-certification regime for companies transferring personal data to the United States from the European Union. Several aspects of the decision are of general interest. Schrems is an Austrian student who, like most of us, has […] Read more