Security has been built into the desktop and mobile offerings, including data encryption and compliance with standards like U Model Clauses, ISO 27001, SOC 2 and HIPAA.
The CJEU ruling also instructed National DPAs to seek a referral to the central European court in cases where they believe there are specific causes for concern, such as the structural issue with model clauses outlined above.
The Irish DPA has been investigating model clauses following another complaint filed by Schrems, who is clearly not about to pack up his law books and give up campaigning for European data rights.
The WP29 is also assessing the legality of the alternative data transfer mechanisms, including model clauses, but has previously said companies can use them in the interim, while work to agree the Privacy Shield continues.
TechCrunch understands a key concern over model clauses is a structural issue, given the lack of redress facilities for European citizens wanting to pursue claims in the U.S. against companies they believe have breached their European rights.
Some are seeking shelter using legal "model clauses," which may provide a short-term solution.
EU data protection authorities also urged the United States and EU to agree a new data transfer framework in the same period, failing which they could start taking enforcement action against companies if they decided that alternatives such as model clauses offered no greater protection against U.S. snooping than the old Safe Harbour did.
EU data protection authorities meeting in Brussels to assess the implications of the ruling, said in a statement that they would assess the impact of the judgment on other data transfer systems, such as binding corporate rules and model clauses between companies.
To implement this governance system, a "model act" approach, similar to USA that allows adoption of model clauses and harmonization by individual states, may be an efficient strategy.
As far back as 1993, the AMWU developed a manual, Working for the Environment, which proposed a model environment clause for adoption in enterprise agreements.
Last May the Irish data protection commissioner said it was referring standard contractual clauses (SCCs) — sometimes referred to as "model contract clauses" — to Ireland's High Court to seek a referral to Europe's top court, the CJEU, for a definitive ruling on the legality of the mechanism.
