Strategic evaluation and response to Schrems II

Produced an impact evaluation of Schrems II (invalidation of EU-US Privacy Shield) and an internal response strategy for internal cybersecurity and business sales functions, for a Fortune 500 business.

This process involved;

• Reviewing guidance issued by the European Data Protection (EDPB, formerly the Article 29 Working Party), European Commission and Court of Justice of the European Union (CJEU);
• Producing legal advice for review by the Chief Privacy Officer around the impact of Schrems II, especially in respect technological and cybersecurity impact;
• Preparation of team-appropriate presentations for enterprise sales and cybersecurity functions within the business around the use of “Supplementary Measures” and the new EU Commission Standard Contractual Clauses (or “SCCs”).

Working with the cybersecurity function to develop appropriate Annex 2 (SCCs) cybersecurity descriptions for use with enterprise clients and downstream suppliers.