October 2015

In its judgement of 6 October 2015, the Court of Justice of the European Union ("CJEU") declared the European Commission's decision of July 2000 on the US-EU Safe Harbor Framework invalid for reason of insufficient protection of personal data provided by the framework. This decision has wide ranging consequences for companies exporting personal data from the EU to the United States. Since a similar framework is in place for exporting personal data from Switzerland to the United States, there are considerable implications also for Swiss companies with cross-border data flows to the United States.