4.4 The Challenge of Cross-Border Data — Quiz

1.

The Schrems I ruling (CJEU, 2015) invalidated which transfer mechanism?

2.

Under GDPR, what is required before personal data can be transferred to a country outside the EU/EEA?

3.

Following Schrems II (CJEU, 2020), what additional step must organisations take when relying on Standard Contractual Clauses?

4.

The EU-US Data Privacy Framework (2023) replaced which of the following?

5.

Describe in your own words what the Schrems cases (I and II) demonstrated about the relationship between EU privacy law and US surveillance law.

6.

Why dös jurisdictional complexity in cross-border data transfers matter for ordinary individuals, not just organisations?