The position of a German privacy authority challenging data transfers under the EU model clauses following the Safe Harbor decision of the ECJ created a higher level of uncertainty.
The European Court of Justice (the CJEU) held that the Safe Harbor privacy principles for the transfer of data to the US are invalid opening questions on past and future data transfers relying on such data protection rules and calling for immediate actions.