Maximillian Schrems v Data Protection Commissioner (2015)
The Court of Justice of the European Union held that data transferred from the EU to a country without sufficient data protection laws (the US) violated the data subject’s rights, and declared the Safe Harbour Decision invalid.