{"id":2388,"date":"2020-09-30T10:36:18","date_gmt":"2020-09-30T08:36:18","guid":{"rendered":"https:\/\/www.actonic.de\/?p=2388"},"modified":"2025-07-22T17:20:38","modified_gmt":"2025-07-22T15:20:38","slug":"privacy-shield-overturned","status":"publish","type":"post","link":"https:\/\/actonic.de\/en\/privacy-shield-overturned\/","title":{"rendered":"Privacy Shield overturned: how can businesses ensure GDPR compliance?"},"content":{"rendered":"

[vc_row][vc_column][vc_column_text css=””]<\/p>\n

The Dilemma<\/h2>\n

Currently, all data transfers are regulated by the EU-US Privacy Shield Framework, designed to provide the companies on both sides of the Atlantic with a way to comply with data protection requirements. However, according to the US surveillance laws, all protection is limited to US persons, while the data of foreign citizens are not covered by the American data protection acts. Thus, American data protection laws clash with the fundamental rights of European citizens. Dealing with American companies, you never know whether your business is under surveillance and have no control over your data. It is obvious that the level of data protection in the USA is not sufficient according to European standards. The issue has finally been recognized and addressed by the Court of Justice of the European Union (CJEU). This summer CJEU invalidated Privacy Shield, which means that US companies may not use Standard Contractual Clauses (SCC)<\/span> to transfer data.<\/p>\n

The Implications<\/h2>\n

The annulment of the EU-US agreement has serious implications. This is especially true for small and medium-sized companies that relied heavily on cloud services. Such companies now need to check whether their cloud service providers process personal data in third countries and on what basis \u2013 only to find out that they are not fully compliant anymore. While legislators are trying to work out some legal base for the transfer of personal data from Europe to the United States, many businesses realize that it is unwise to rely solely on large IT companies from China and the USA and are looking for server and data centre solutions.<\/p>\n

The Solution<\/h2>\n

If you, like many others, are searching for a server\/data center solution for the Atlassian ecosystem that will help you ensure the GDPR compliance, check out our Data Protection and Security Toolkit for Jira<\/a><\/strong> and Data Protection and Security Toolkit for Confluence<\/a><\/strong>. It contains a number of modules that will help you to:<\/p>\n