Schrems I: When EU Data Protection Crossed the Atlantic
Schrems I invalidated the EU–U.S. Safe Harbor framework and established that protection abroad must be essentially equivalent to EU law. The CJEU also confirmed that adequacy decisions cannot prevent independent supervisory authorities from examining individual complaints.