The CEJU issued it's long awaited judgement in Schrems II, finding the EU Commission Standard Contractual Clauses valid for data transfers to third countries such as the U.S., but invalidates the EU-US Privacy Shield.