Earlier this week another huge shift happened, which may portend a very different world for compliance going forward. As with the most recent titanic shift (from the Volkswagen emissions-testing scandal) this event did not arrive from anti-corruption compliance. The event was the ruling by the European Court of Justice, in a decision known as the Schrems case that the previously presumed European Union Safe Harbor regime is invalid. That means EU member state data protection regulators do have power to investigate complaints about the adequacy of the level of protection of data transfers to the United States, and to suspend data transfers if they conclude that the U.S. does not provide an adequate level of protection.
