Ex Libris Statement Regarding Invalidation of Privacy Shield Framework

European Court of Justice decision on 16 July 2020 invalidates the EU-U.S. Privacy Shield Framework

On 16 July 2020, the Court of Justice of the European Union (“CJEU”) issued a decision in the Schrems II case, invalidating the EU-U.S. Privacy Shield framework as an adequate safeguard of transfers of personal data from the European Union to the United States, but upholding the validity of the European Commission’s Standard Contractual Clauses (“SCCs”) as a legal mechanism for the transfer of EU personal data. The European Data Protection Board (EDPB) is working to provide further guidance regarding SCCs and other aspects of data transfers following the Court’s decision.

Ex libris is committed to protecting the privacy of personal data and to adherence to the European Union’s General Data Protection Regulation (GDPR). Ex Libris builds its cloud services with privacy in mind and taking into account internationally recognized security and privacy standards for the benefit of all of its customers in Europe and around the world. These same principles continue to apply to protection of international transfers of personal data.

We appreciate that Ex Libris customers who process personal data subject to the GDPR may have questions about the impact of this ruling. We are closely watching for further guidance from EU data protection authorities and diligently assessing the extent of any impact of the Court’s decision on Ex Libris and its customer services and any appropriate next steps.  We expect to complete our assessment in the coming weeks and will update our customers accordingly.

If you have any questions, please do not hesitate to reach out to privacy@exlibrisgroup.com

Ellen Amsel

Privacy and Regulation Officer & DPO

Ex Libris Group

Record of Changes

Revision Control