Case C-362/14: Judgment of the Court (Grand Chamber) of 6 October 2015 (request for a preliminary ruling from the High Court (Ireland)) — Maximillian Schrems v Data Protection Commissioner (Reference for a preliminary ruling — Personal data — Protection of individuals with regard to the processing of such data — Charter of Fundamental Rights of the European Union — Articles 7, 8 and 47 — Directive 95/46/EC — Articles 25 and 28 — Transfer of personal data to third countries — Decision 2000/520/EC — Transfer of personal data to the United States — Inadequate level of protection — Validity — Complaint by an individual whose data has been transferred from the European Union to the United States — Powers of the national supervisory authorities)
Date: 2015-10-06
Institutions: Court of Justice
Subjects: United States, cross-frontier data flow, data protection, data-processing law, personal data, protection of privacy








C_2015398EN.01000501.xml










30.11.2015   


EN


Official Journal of the European Union


C 398/5





Judgment of the Court (Grand Chamber) of 6 October 2015 (request for a preliminary ruling from the High Court (Ireland)) — Maximillian Schrems v Data Protection Commissioner
(Case C-362/14) (1)

((Reference for a preliminary ruling - Personal data - Protection of individuals with regard to the processing of such data - Charter of Fundamental Rights of the European Union - Articles 7, 8 and 47 - Directive 95/46/EC - Articles 25 and 28 - Transfer of personal data to third countries - Decision 2000/520/EC - Transfer of personal data to the United States - Inadequate level of protection - Validity - Complaint by an individual whose data has been transferred from the European Union to the United States - Powers of the national supervisory authorities))
(2015/C 398/06)
Language of the case: English

Referring court

High Court (Ireland)

Parties to the main proceedings


Applicant: Maximillian Schrems

Respondent: Data Protection Commissioner

Operative part of the judgment







1.


Article 25(6) of Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data as amended by Regulation (EC) No 1882/2003 of the European Parliament and of the Council of 29 September 2003, read in the light of Articles 7, 8 and 47 of the Charter of Fundamental Rights of the European Union, must be interpreted as meaning that a decision adopted pursuant to that provision, such as Commission Decision 2000/520/EC of 26 July 2000 pursuant to Directive 95/46 on the adequacy of the protection provided by the safe harbour privacy principles and related frequently asked questions issued by the US Department of Commerce, by which the European Commission finds that a third country ensures an adequate level of protection, does not prevent a supervisory authority of a Member State, within the meaning of Article 28 of that directive as amended, from examining the claim of a person concerning the protection of his rights and freedoms in regard to the processing of personal data relating to him which has been transferred from a Member State to that third country when that person contends that the law and practices in force in the third country do not ensure an adequate level of protection.










2.


Decision 2000/520 is invalid.






(1)  OJ C 351, 6.10.2014.