{"id":12703,"date":"2021-04-13T08:02:46","date_gmt":"2021-04-13T08:02:46","guid":{"rendered":"https:\/\/complior.se\/?p=12703"},"modified":"2026-04-06T12:24:39","modified_gmt":"2026-04-06T10:24:39","slug":"without-the-privacy-shield-are-your-data-transfers-legal","status":"publish","type":"post","link":"https:\/\/complior.se\/en\/without-the-privacy-shield-are-your-data-transfers-legal\/","title":{"rendered":"Without the Privacy Shield, are your data transfers legal?"},"content":{"rendered":"<div class=\"wp-block-uagb-container uagb-block-1c95cc62 alignfull uagb-is-root-container\"><div class=\"uagb-container-inner-blocks-wrap\">\n<div class=\"wp-block-group blockera-block blockera-block-627ud4 is-vertical is-layout-flex wp-container-core-group-is-layout-fe9cc265 wp-block-group-is-layout-flex\">\n<div class=\"wp-block-kadence-advancedbtn kb-buttons-wrap kb-btns12703_6663fa-30\"><a class=\"kb-button kt-button button kb-btn12703_b9235c-c3 kt-btn-size-standard kt-btn-width-type-auto kb-btn-global-fill  kt-btn-has-text-true kt-btn-has-svg-true  wp-block-kadence-singlebtn\" href=\"https:\/\/complior.se\/en\/resources\/\"><span class=\"kb-svg-icon-wrap kb-svg-icon-fe_arrowLeft kt-btn-icon-side-left\"><svg viewbox=\"0 0 24 24\"  fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"  aria-hidden=\"true\"><line x1=\"19\" y1=\"12\" x2=\"5\" y2=\"12\"\/><polyline points=\"12 19 5 12 12 5\"\/><\/svg><\/span><span class=\"kt-btn-inner-text\">Tillbaka till resurser<\/span><\/a><\/div>\n\n\n\n<span class=\"kt-adv-heading12703_ef508b-3e wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_ef508b-3e\">Blog<\/span>\n\n\n\n<h1 class=\"kt-adv-heading12703_c19764-74 animated fadeIn wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_c19764-74\">Without the Privacy Shield, are your data transfers legal?<\/h1>\n\n\n\n<div class=\"wp-block-group animated fadeIn is-nowrap is-layout-flex wp-container-core-group-is-layout-6c531013 wp-block-group-is-layout-flex\"><div class=\"publish-date-container\">\r\n\t<svg\r\n\t\twidth=\"16\"\r\n\t\theight=\"16\"\r\n\t\tviewbox=\"0 0 24 24\"\r\n\t\tfill=\"none\"\r\n\t\tstroke=\"#4b4b4b\"\r\n\t\tstroke-width=\"2\"\r\n\t\tstroke-linecap=\"round\"\r\n\t\tstroke-linejoin=\"round\"\r\n\t\txmlns=\"http:\/\/www.w3.org\/2000\/svg\"\r\n\t\taria-hidden=\"true\"\r\n\t>\r\n\t\t<rect x=\"3\" y=\"4\" width=\"18\" height=\"18\" rx=\"2\" ry=\"2\"><\/rect>\r\n\t\t<line x1=\"16\" y1=\"2\" x2=\"16\" y2=\"6\"><\/line>\r\n\t\t<line x1=\"8\" y1=\"2\" x2=\"8\" y2=\"6\"><\/line>\r\n\t\t<line x1=\"3\" y1=\"10\" x2=\"21\" y2=\"10\"><\/line>\r\n\t<\/svg>\r\n\t<span class=\"date-text\">\r\n\t\tApr 13, 2021\t<\/span>\r\n<\/div>\n\n\n<h1 class=\"kt-adv-heading12703_9c058b-20 wp-block-kadence-advancedheading kt-adv-heading-has-icon animated fadeIn delay-100ms\" data-kb-block=\"kb-adv-heading12703_9c058b-20\"><span class=\"kb-svg-icon-wrap kb-adv-heading-icon kb-svg-icon-fe_clock kb-adv-heading-icon-side-left\"><svg viewbox=\"0 0 24 24\"  fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"  aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"\/><polyline points=\"12 6 12 12 16 14\"\/><\/svg><\/span><span class=\"kb-adv-text-inner\">5 min <\/span><\/h1><\/div>\n<\/div>\n\n\n\n<figure class=\"wp-block-kadence-image kb-image12703_25d569-19 size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"569\" src=\"https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06-1024x569.png\" alt=\"World map with EU and US flag breaking apart\" class=\"kb-img wp-image-51264\" srcset=\"https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06-1024x569.png 1024w, https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06-300x167.png 300w, https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06-768x427.png 768w, https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06-1536x854.png 1536w, https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06-2048x1138.png 2048w, https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06-18x10.png 18w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-uagb-container uagb-block-2eeb7bfc alignfull uagb-is-root-container\"><div class=\"uagb-container-inner-blocks-wrap\">\n<div class=\"wp-block-group blockera-block blockera-block-xzh3qk is-vertical is-layout-flex wp-container-core-group-is-layout-b2c973f4 wp-block-group-is-layout-flex\">\n<h2 class=\"kt-adv-heading12703_69793c-16 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_69793c-16\">Introduction<\/h2>\n\n\n\n<p class=\"kt-adv-heading12703_c47d00-64 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_c47d00-64\">The General Data Protection Regulation (GDPR) demands that the protection granted to personal data in the European Economic Area (EEA), the EU, Iceland, Liechtenstein and Norway, must travel with the data wherever it goes.<\/p>\n\n\n\n<p class=\"kt-adv-heading12703_902104-9d wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_902104-9d\">Any transfer of personal data outside of the EEA must ensure a similar level of protection. Privacy Shield was a legal framework and agreement between the US and EU. It was the most common legal basis for organizations to transfer personal data to the US under GDPR. Organizations in the US needed to self-certify through the U.S. Department of Commerce\u2019s International Trade Administration.<\/p>\n\n\n\n<p class=\"kt-adv-heading12703_4ea1e3-c7 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_4ea1e3-c7\">On July 26, 2020, the Schrems II case in the European Court of Justice marked the end of Privacy Shield.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group blockera-block blockera-block-o1zwuj is-vertical is-layout-flex wp-container-core-group-is-layout-b2c973f4 wp-block-group-is-layout-flex\">\n<h2 class=\"kt-adv-heading12703_0924fa-fb wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_0924fa-fb\">What is the Schrems II case?<\/h2>\n\n\n\n<p class=\"kt-adv-heading12703_5cb7c7-19 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_5cb7c7-19\">The first Schrems case, named after Max Schrems (a lawyer and privacy activist), resulted in the annulment of Safe Harbour, which was the predecessor to Privacy Shield.<\/p>\n\n\n\n<p class=\"kt-adv-heading12703_ca9644-38 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_ca9644-38\">Schrems challenged Safe Harbour using Facebook as a case example, since his personal data was transferred to the US where Facebook stored its data. The case coincided with the Snowden revelations about US surveillance, contributing to the ruling. After Safe Harbour was invalidated, the EU introduced Privacy Shield as a replacement. The Schrems II judgment later invalidated Privacy Shield as well.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group blockera-block blockera-block-1s97839 is-vertical is-layout-flex wp-container-core-group-is-layout-b2c973f4 wp-block-group-is-layout-flex\">\n<h2 class=\"kt-adv-heading12703_a3e38b-57 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_a3e38b-57\">What happens now?<\/h2>\n\n\n\n<p class=\"kt-adv-heading12703_80dcee-88 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_80dcee-88\">With Privacy Shield annulled, organizations must find alternative legal mechanisms to transfer personal data under GDPR.<\/p>\n\n\n\n<p class=\"kt-adv-heading12703_1b0585-0e wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_1b0585-0e\">Any country outside the EEA is defined as a \u201cthird country.\u201d Under Chapter 5 of GDPR, transfers are only legal if the country ensure adequate protection, or an approved transfer mechanism is used.<\/p>\n\n\n\n<p class=\"kt-adv-heading12703_9071c4-ca wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_9071c4-ca\">Since the US no longer meets adequacy requirements, organizations must rely on mechanisms such as Standard Contractual Clauses (SCC) and Binding Corporate Rules (BCR).<\/p>\n\n\n\n<p class=\"kt-adv-heading12703_f59ce9-fb wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_f59ce9-fb\">These mechanisms may require supplementary safeguards if the legal framework of the receiving country undermines their effectiveness.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group blockera-block blockera-block-1mmmvnt is-vertical is-layout-flex wp-container-core-group-is-layout-b2c973f4 wp-block-group-is-layout-flex\">\n<h2 class=\"kt-adv-heading12703_e4a8e9-27 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_e4a8e9-27\">Additional legal challenges<\/h2>\n\n\n\n<p class=\"kt-adv-heading12703_c8e6a9-f1 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_c8e6a9-f1\">Even with transfer mechanisms in place, organizations may still face challenges due to laws such as the CLOUD Act. The lack of international agreements (such as MLATs) between the EU and US further complicates compliance.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group blockera-block blockera-block-1a20413 is-vertical is-layout-flex wp-container-core-group-is-layout-b2c973f4 wp-block-group-is-layout-flex\">\n<h2 class=\"kt-adv-heading12703_847e84-69 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_847e84-69\">Recommended steps (EDPB 01\/2020)<\/h2>\n\n\n\n<p class=\"kt-adv-heading12703_6bb585-c0 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_6bb585-c0\">Organizations transferring personal data should follow these five steps:<\/p>\n\n\n\n<ol style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.227), 16px);font-style:normal;font-weight:500\" class=\"wp-block-list blockera-block blockera-block-2qlews has-manrope-font-family\">\n<li>Know your transfers<\/li>\n\n\n\n<li>Verify your transfer mechanism<\/li>\n\n\n\n<li>Assess third-country risks<\/li>\n\n\n\n<li>Implement supplementary measures<\/li>\n\n\n\n<li>Monitor and re-evaluate<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-group blockera-block blockera-block-1m7ius0 is-vertical is-layout-flex wp-container-core-group-is-layout-90752e8f wp-block-group-is-layout-flex\">\n<h3 class=\"kt-adv-heading12703_04451c-d7 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_04451c-d7\">Know your transfers<\/h3>\n\n\n\n<p class=\"kt-adv-heading12703_92758b-02 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_92758b-02\">Map out all transfers of personal data to third countries within your organization.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group blockera-block blockera-block-1m7ius0 is-vertical is-layout-flex wp-container-core-group-is-layout-90752e8f wp-block-group-is-layout-flex\">\n<h3 class=\"kt-adv-heading12703_a19247-2e wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_a19247-2e\">Verify your transfer mechanism<\/h3>\n\n\n\n<p class=\"kt-adv-heading12703_9b7d3b-b4 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_9b7d3b-b4\">Determine whether the country has adequate protection or which transfer mechanism is used.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group blockera-block blockera-block-1m7ius0 is-vertical is-layout-flex wp-container-core-group-is-layout-90752e8f wp-block-group-is-layout-flex\">\n<h3 class=\"kt-adv-heading12703_74a9e2-f2 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_74a9e2-f2\">Assess third-country risks<\/h3>\n\n\n\n<p class=\"kt-adv-heading12703_fd2d33-e2 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_fd2d33-e2\">Evaluate whether laws or practices in the receiving country affect the effectiveness of safeguards.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group blockera-block blockera-block-1m7ius0 is-vertical is-layout-flex wp-container-core-group-is-layout-90752e8f wp-block-group-is-layout-flex\">\n<h3 class=\"kt-adv-heading12703_d3e44e-e7 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_d3e44e-e7\">Implement supplementary measures<\/h3>\n\n\n\n<p class=\"kt-adv-heading12703_ef1c8a-c0 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_ef1c8a-c0\">Adopt additional safeguards to ensure an equivalent level of data protection to that of the EU. You may need to consult your supervisory authority depending on the mechanism used.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group blockera-block blockera-block-1m7ius0 is-vertical is-layout-flex wp-container-core-group-is-layout-90752e8f wp-block-group-is-layout-flex\">\n<h3 class=\"kt-adv-heading12703_c51c62-9e wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_c51c62-9e\">Monitor and re-evaluate<\/h3>\n\n\n\n<p class=\"kt-adv-heading12703_0b2210-e4 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_0b2210-e4\">Continuously assess the level of protection and monitor any legal or regulatory changes.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group blockera-block blockera-block-a0a6rz is-vertical is-layout-flex wp-container-core-group-is-layout-b2c973f4 wp-block-group-is-layout-flex\">\n<h2 class=\"kt-adv-heading12703_7131bf-8a wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_7131bf-8a\">Risk considerations<\/h2>\n\n\n\n<p class=\"kt-adv-heading12703_97ed1d-1d wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_97ed1d-1d\">EU organizations using US-based cloud services may risk GDPR violations due to the CLOUD Act and Uncertainty around supplementary measures <\/p>\n\n\n\n<p class=\"kt-adv-heading12703_afa13e-5e wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_afa13e-5e\">Organizations handling sensitive personal data, such as authorities, healthcare providers, banks, and insurance companies, face even stricter requirements and higher penalties.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group blockera-block blockera-block-17juv3w is-vertical is-layout-flex wp-container-core-group-is-layout-b2c973f4 wp-block-group-is-layout-flex\">\n<h2 class=\"kt-adv-heading12703_ee502b-96 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_ee502b-96\">Choosing the right hosting strategy<\/h2>\n\n\n\n<p class=\"kt-adv-heading12703_756d49-d1 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_756d49-d1\">It may be beneficial to choose an EEA-based cloud or hosting provider that operates fully under GDPR. This reduces legal uncertainty, compliance risks and exposure to foreign legislation<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group blockera-block blockera-block-xy2ink is-vertical is-layout-flex wp-container-core-group-is-layout-b2c973f4 wp-block-group-is-layout-flex\">\n<h2 class=\"kt-adv-heading12703_727456-27 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_727456-27\">How Complior can help<\/h2>\n\n\n\n<p class=\"kt-adv-heading12703_cc16b1-fc wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_cc16b1-fc\">Switching hosting providers to a local EEA company is often easier than expected. Complior offers secure data transfers with minimal downtime, backup protocols and monitoring and ongoing compliance with new regulations. <\/p>\n\n\n\n<p class=\"kt-adv-heading12703_6eecda-fe wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_6eecda-fe\">GDPR compliance can be complex and resource-intensive, especially for small and medium-sized businesses. Complior provides managed hosting and GDPR services to help organizations meet regulatory requirements, protect sensitive data and focus on their core business.<\/p>\n\n\n\n<p class=\"kt-adv-heading12703_7d1fb8-2f wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading12703_7d1fb8-2f\">With data centers located in Stockholm, you always know where your data is stored, without unexpected exposure to foreign authorities.<\/p>\n\n\n\n<div class=\"wp-block-uagb-buttons uagb-buttons__outer-wrap uagb-btn__default-btn uagb-btn-tablet__default-btn uagb-btn-mobile__default-btn uagb-block-2ab15fae\"><div class=\"uagb-buttons__wrap uagb-buttons-layout-wrap\">\n<div class=\"wp-block-uagb-buttons-child uagb-buttons__outer-wrap uagb-block-d12e540a wp-block-button scale-hover\"><div class=\"uagb-button__wrapper\"><a class=\"uagb-buttons-repeater wp-block-button__link\" aria-label=\"\" href=\"http:\/\/complior.se\/en\/contact\/\" rel=\"follow noopener\" target=\"_self\" role=\"button\"><div class=\"uagb-button__link\">Contact us<\/div><span class=\"uagb-button__icon uagb-button__icon-position-after\"><svg xmlns=\"https:\/\/www.w3.org\/2000\/svg\" viewbox=\"0 0 448 512\" aria-hidden=\"true\" focussable=\"false\"><path d=\"M438.6 278.6l-160 160C272.4 444.9 264.2 448 256 448s-16.38-3.125-22.62-9.375c-12.5-12.5-12.5-32.75 0-45.25L338.8 288H32C14.33 288 .0016 273.7 .0016 256S14.33 224 32 224h306.8l-105.4-105.4c-12.5-12.5-12.5-32.75 0-45.25s32.75-12.5 45.25 0l160 160C451.1 245.9 451.1 266.1 438.6 278.6z\"><\/path><\/svg><\/span><\/a><\/div><\/div>\n<\/div><\/div>\n<\/div>\n<\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>With the Privacy shield annulled, organizations must find another way to make the transfer legal under the GDPR. <\/p>","protected":false},"author":2,"featured_media":51264,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"blogg","format":"standard","meta":{"_editorskit_title_hidden":false,"_editorskit_reading_time":4,"_editorskit_is_block_options_detached":false,"_editorskit_block_options_position":"{}","_eb_attr":"","inline_featured_image":false,"_uag_custom_page_level_css":"","wpm_timeformat":"","_wpm_styles":"","footnotes":""},"categories":[118],"tags":[117],"class_list":["post-12703","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blogg","tag-blog"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Without the Privacy Shield, are your data transfers legal? - Complior<\/title>\n<meta name=\"description\" content=\"With the Privacy shield annulled, organizations must find another way to make the transfer legal under the GDPR.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/complior.se\/en\/without-the-privacy-shield-are-your-data-transfers-legal\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Without the Privacy Shield, are your data transfers legal? - Complior\" \/>\n<meta property=\"og:description\" content=\"With the Privacy shield annulled, organizations must find another way to make the transfer legal under the GDPR.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/complior.se\/en\/without-the-privacy-shield-are-your-data-transfers-legal\/\" \/>\n<meta property=\"og:site_name\" content=\"Complior\" \/>\n<meta property=\"article:published_time\" content=\"2021-04-13T08:02:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-06T10:24:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06.png\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1423\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Kikki Bostrom\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kikki Bostrom\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/complior.se\\\/without-the-privacy-shield-are-your-data-transfers-legal\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/complior.se\\\/without-the-privacy-shield-are-your-data-transfers-legal\\\/\"},\"author\":{\"name\":\"Kikki Bostrom\",\"@id\":\"https:\\\/\\\/complior.se\\\/#\\\/schema\\\/person\\\/841f8a57425589a6d7f13c201d345016\"},\"headline\":\"Without the Privacy Shield, are your data transfers legal?\",\"datePublished\":\"2021-04-13T08:02:46+00:00\",\"dateModified\":\"2026-04-06T10:24:39+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/complior.se\\\/without-the-privacy-shield-are-your-data-transfers-legal\\\/\"},\"wordCount\":658,\"publisher\":{\"@id\":\"https:\\\/\\\/complior.se\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/complior.se\\\/without-the-privacy-shield-are-your-data-transfers-legal\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2021\\\/04\\\/Blog-1-06.png\",\"keywords\":[\"Blog\"],\"articleSection\":[\"Blogg\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/complior.se\\\/without-the-privacy-shield-are-your-data-transfers-legal\\\/\",\"url\":\"https:\\\/\\\/complior.se\\\/without-the-privacy-shield-are-your-data-transfers-legal\\\/\",\"name\":\"Without the Privacy Shield, are your data transfers legal? - Complior\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/complior.se\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/complior.se\\\/without-the-privacy-shield-are-your-data-transfers-legal\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/complior.se\\\/without-the-privacy-shield-are-your-data-transfers-legal\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2021\\\/04\\\/Blog-1-06.png\",\"datePublished\":\"2021-04-13T08:02:46+00:00\",\"dateModified\":\"2026-04-06T10:24:39+00:00\",\"description\":\"With the Privacy shield annulled, organizations must find another way to make the transfer legal under the GDPR.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/complior.se\\\/without-the-privacy-shield-are-your-data-transfers-legal\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/complior.se\\\/without-the-privacy-shield-are-your-data-transfers-legal\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/complior.se\\\/without-the-privacy-shield-are-your-data-transfers-legal\\\/#primaryimage\",\"url\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2021\\\/04\\\/Blog-1-06.png\",\"contentUrl\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2021\\\/04\\\/Blog-1-06.png\",\"width\":2560,\"height\":1423,\"caption\":\"World map with EU and US flag breaking apart\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/complior.se\\\/without-the-privacy-shield-are-your-data-transfers-legal\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/complior.se\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Without the Privacy Shield, are your data transfers legal?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/complior.se\\\/#website\",\"url\":\"https:\\\/\\\/complior.se\\\/\",\"name\":\"Complior\",\"description\":\"Security beyond compliance\",\"publisher\":{\"@id\":\"https:\\\/\\\/complior.se\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/complior.se\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/complior.se\\\/#organization\",\"name\":\"Complior\",\"url\":\"https:\\\/\\\/complior.se\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/complior.se\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/Complior_logo_dark-scaled.png\",\"contentUrl\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/Complior_logo_dark-scaled.png\",\"width\":2560,\"height\":960,\"caption\":\"Complior\"},\"image\":{\"@id\":\"https:\\\/\\\/complior.se\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/complior.se\\\/#\\\/schema\\\/person\\\/841f8a57425589a6d7f13c201d345016\",\"name\":\"Kikki Bostrom\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3a78a33b10cfcbf5a04f53b522f24d176544c6ab014b5174854b6bb92287e13?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3a78a33b10cfcbf5a04f53b522f24d176544c6ab014b5174854b6bb92287e13?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3a78a33b10cfcbf5a04f53b522f24d176544c6ab014b5174854b6bb92287e13?s=96&d=mm&r=g\",\"caption\":\"Kikki Bostrom\"},\"url\":\"https:\\\/\\\/complior.se\\\/en\\\/author\\\/kikki\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Without the Privacy Shield, are your data transfers legal? - Complior","description":"With the Privacy shield annulled, organizations must find another way to make the transfer legal under the GDPR.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/complior.se\/en\/without-the-privacy-shield-are-your-data-transfers-legal\/","og_locale":"en_GB","og_type":"article","og_title":"Without the Privacy Shield, are your data transfers legal? - Complior","og_description":"With the Privacy shield annulled, organizations must find another way to make the transfer legal under the GDPR.","og_url":"https:\/\/complior.se\/en\/without-the-privacy-shield-are-your-data-transfers-legal\/","og_site_name":"Complior","article_published_time":"2021-04-13T08:02:46+00:00","article_modified_time":"2026-04-06T10:24:39+00:00","og_image":[{"width":2560,"height":1423,"url":"https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06.png","type":"image\/png"}],"author":"Kikki Bostrom","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kikki Bostrom","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/complior.se\/without-the-privacy-shield-are-your-data-transfers-legal\/#article","isPartOf":{"@id":"https:\/\/complior.se\/without-the-privacy-shield-are-your-data-transfers-legal\/"},"author":{"name":"Kikki Bostrom","@id":"https:\/\/complior.se\/#\/schema\/person\/841f8a57425589a6d7f13c201d345016"},"headline":"Without the Privacy Shield, are your data transfers legal?","datePublished":"2021-04-13T08:02:46+00:00","dateModified":"2026-04-06T10:24:39+00:00","mainEntityOfPage":{"@id":"https:\/\/complior.se\/without-the-privacy-shield-are-your-data-transfers-legal\/"},"wordCount":658,"publisher":{"@id":"https:\/\/complior.se\/#organization"},"image":{"@id":"https:\/\/complior.se\/without-the-privacy-shield-are-your-data-transfers-legal\/#primaryimage"},"thumbnailUrl":"https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06.png","keywords":["Blog"],"articleSection":["Blogg"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/complior.se\/without-the-privacy-shield-are-your-data-transfers-legal\/","url":"https:\/\/complior.se\/without-the-privacy-shield-are-your-data-transfers-legal\/","name":"Without the Privacy Shield, are your data transfers legal? - Complior","isPartOf":{"@id":"https:\/\/complior.se\/#website"},"primaryImageOfPage":{"@id":"https:\/\/complior.se\/without-the-privacy-shield-are-your-data-transfers-legal\/#primaryimage"},"image":{"@id":"https:\/\/complior.se\/without-the-privacy-shield-are-your-data-transfers-legal\/#primaryimage"},"thumbnailUrl":"https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06.png","datePublished":"2021-04-13T08:02:46+00:00","dateModified":"2026-04-06T10:24:39+00:00","description":"With the Privacy shield annulled, organizations must find another way to make the transfer legal under the GDPR.","breadcrumb":{"@id":"https:\/\/complior.se\/without-the-privacy-shield-are-your-data-transfers-legal\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/complior.se\/without-the-privacy-shield-are-your-data-transfers-legal\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/complior.se\/without-the-privacy-shield-are-your-data-transfers-legal\/#primaryimage","url":"https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06.png","contentUrl":"https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06.png","width":2560,"height":1423,"caption":"World map with EU and US flag breaking apart"},{"@type":"BreadcrumbList","@id":"https:\/\/complior.se\/without-the-privacy-shield-are-your-data-transfers-legal\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/complior.se\/"},{"@type":"ListItem","position":2,"name":"Without the Privacy Shield, are your data transfers legal?"}]},{"@type":"WebSite","@id":"https:\/\/complior.se\/#website","url":"https:\/\/complior.se\/","name":"Complior","description":"Security beyond compliance","publisher":{"@id":"https:\/\/complior.se\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/complior.se\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/complior.se\/#organization","name":"Complior","url":"https:\/\/complior.se\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/complior.se\/#\/schema\/logo\/image\/","url":"https:\/\/complior.se\/wp-content\/uploads\/2025\/06\/Complior_logo_dark-scaled.png","contentUrl":"https:\/\/complior.se\/wp-content\/uploads\/2025\/06\/Complior_logo_dark-scaled.png","width":2560,"height":960,"caption":"Complior"},"image":{"@id":"https:\/\/complior.se\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/complior.se\/#\/schema\/person\/841f8a57425589a6d7f13c201d345016","name":"Kikki Bostrom","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/d3a78a33b10cfcbf5a04f53b522f24d176544c6ab014b5174854b6bb92287e13?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d3a78a33b10cfcbf5a04f53b522f24d176544c6ab014b5174854b6bb92287e13?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d3a78a33b10cfcbf5a04f53b522f24d176544c6ab014b5174854b6bb92287e13?s=96&d=mm&r=g","caption":"Kikki Bostrom"},"url":"https:\/\/complior.se\/en\/author\/kikki\/"}]}},"uagb_featured_image_src":{"full":["https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06.png",2560,1423,false],"thumbnail":["https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06-150x150.png",150,150,true],"medium":["https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06-300x167.png",300,167,true],"medium_large":["https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06-768x427.png",768,427,true],"large":["https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06-1024x569.png",1024,569,true],"1536x1536":["https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06-1536x854.png",1536,854,true],"2048x2048":["https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06-2048x1138.png",2048,1138,true],"trp-custom-language-flag":["https:\/\/complior.se\/wp-content\/uploads\/2021\/04\/Blog-1-06-18x10.png",18,10,true]},"uagb_author_info":{"display_name":"Kikki Bostrom","author_link":"https:\/\/complior.se\/en\/author\/kikki\/"},"uagb_comment_info":0,"uagb_excerpt":"With the Privacy shield annulled, organizations must find another way to make the transfer legal under the GDPR.","_links":{"self":[{"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/posts\/12703","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/comments?post=12703"}],"version-history":[{"count":6,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/posts\/12703\/revisions"}],"predecessor-version":[{"id":80388,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/posts\/12703\/revisions\/80388"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/media\/51264"}],"wp:attachment":[{"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/media?parent=12703"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/categories?post=12703"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/tags?post=12703"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}