Privacy Shield now a thing of the past and while standard contractual clauses remain valid, organisations' ability to rely on them have now been seriously impacted by this latest ruling. Going forwards, if organisations are to rely on standard contractual clauses, they will need to undertake their own due diligence of the recipients' adequacy on a case by case basis which will no doubt be another administrative hurdle for organisations wishing to transfer data outside of the EEA. 

This is no doubt a very bold move by the European Courts and will have huge ramifications not just for EU-US transfers but all ex EEA transfers. We now need our regulators to act quickly, effectively and above all practically to help us determine the best way to navigate the new landscape for international data transfers.