Bavarian DPA Holds SCCs Alone Not Enough for European Use of US Email Service

In a notable application of the European Court of Justice’s “Schrems II” decision, the data protection authority for the German state of Bavaria recently held that use by a German entity of US-based MailChimp (which use involved transferring personal information to the US) violated GDPR. As we previously wrote, the Schrems II decision turned on concerns around lack of sufficient safeguards under US law......
By: Sheppard Mullin Richter & Hampton LLP

Array