An Existential Crisis for Global Data Flows: Privacy and Security Issues
summary
July 2020’s Schrems II decision annuls Privacy Shield and forces companies to treat transfers under standard contractual clauses as lawful only after a documented country‑by‑country transfer impact assessment and effective supplementary measures or else suspend transfers. Regulators already use fines (up to €20M or 4% global revenue), orders such as stop using CloudFlare in Portugal, and mixed rulings (France finding AWS safeguards sufficient). Practical measures examined include encryption and pseudonymization, multi‑party computation, transparency reports and updated SCCs; many firms rearchitect or localize services while litigation and policy fixes proceed.
AI-written summary · about
chapters (10)
- 0:00Intro
- 0:47The complex world of international data transfers
- 6:22Schrems II: What the Court said
- 12:00European Data Protection Board, FAQ
- 18:52Myths and misconceptions
- 26:05Pain Points: Regulatory Risk
- 38:27Practical ways forward
- 42:37Supplemental measures: Legal safeguards
- 44:53Supplemental measures: Administrative safeguards
- 49:32Supplemental measures: Technical safeguards
related talks
58mGlobal Data Flows and Perspective – Keynote & Panel
34mInternational Data Transfer After Schrems II - Facing the Risk?
19mUse of Cloud and Other Services in the Context of Schrems II
45mData Privacy Legislation and the Impact on SRE
01h 09mREGULATION OF GLOBAL DATA FLOWS: A STORY OF THE IMPOSSIBLE?
01h 20mThe Transatlantic Debate
01h 12mWhat the Schrems decision means in the US and Europe.
01h 15mSCHREMS II: 18 MONTHS LATER: MUCH ADO ABOUT NOTHING OR A GAME CHANGER?