10. 12. 2015
By its recent Decision No. C-362/14, the Court of Justice of the European Union (ECJ) annulled European Commission Decision 2000/520 on Safe Harbour. Safe harbour privacy principles provide for an exception to the limited transfer of personal data outside the European Union (EU), as they enable the free movement of such data between the EU and the United States. Consequently, EU-based data controllers were able to transfer personal data to data processors in the United States without first having to initiate a separate procedure before the national data protection authorities (e.g. in Slovenia, data controllers in general need to obtain a special decision under Article 63 of the Personal Data Protection Act (PDPA-1) prior to the transfer of data abroad).