Alex van der Wolk spoke to Compliance Week about the financial burden businesses are now facing in the aftermath of the Court of Justice of the European Union’s (CJEU) decision to invalidate the EU-U.S. Privacy Shield.
According to Alex, making companies and data protection authorities responsible for evaluating a destination country’s laws “is a huge burden to bear, and one can wonder whether it is at all appropriate to put this burden on the market and (generally) under-funded DPAs.”
“It took the Irish DPA millions of Euros to litigate the Schrems case, and it took the CJEU years to reach a conclusion on the adequacy of the Privacy Shield framework,” Alex continued. “It is unimaginable that companies or DPAs are able to do this for each and every transfer.”
Read the full article (subscription required).