MANAGING INNOVATIVE COMPANY’S CAPITAL: THE CASE OF PERSONAL DATA TRANSFER

Abstract

protection. The only case in which this issue could become more debatable is if personal data crosses EU borders. The transfer of personal data to third countries proved its disputed status when the CJEU invalidated the Safe Harbour Agreement, one of the frameworks for the transfer of personal data to the US and several more came under the CJEU’s scrutiny, including the Safe Harbour Agreement’s successor, the Privacy Shield Agreement. It has been suggested that some of these instruments for transfer need to be repealed or amended in order to be brought in conformity with the GDPR. The paper, after analysing each of the grounds for transfer which may be used by EU companies, argues that regardless of the recent entry into force of the GDPR, the data protection “revolution” is still not complete, at least as far the transborder data flows are concerned.

Keywords

• data protection
• EU law
• General Data Protection Regulation
• privacy
• transborder data flows
• transfer of data