In July 2020 the Court of Justice the European Union s
(CJEU)
Schrems II decision declared the EU-US
Privacy Shield Protections inadequate for the protection of
European data. On November 10, 2020, the European Data Protection
Board (EDPB) released
Recommendations 01/2020 on measures that supplement transfer tools
to ensure compliance with the EU level of protection of personal
data. The recommendations provide a framework for data
exporters to analyze the protections afforded to European Union
residents person data and ensure that throughout the data
lifecycle data receive the protection demanded by EU privacy law as
embodied in the GDPR and other regulations.
The recommendations provide six steps to analyze the processing