It took me a minute, but I finally put to paper all the things I've been ranting about in comments, puzzling over with friends and family (especially my Castlebridge family), and trying to articulate to clients regarding the DPC's recent decision in the Meta case.

There are no simple solutions regarding the DPC's decision. This decision, as well as related EDPB guidance, CJEU case law, and planned legislation, will continue to have profound ripple effects that go well beyond Meta or big tech, and I worry that many companies may decide in the intervening period of uncertainty and impossible competing legal regimes to simply stop engaging with the EU altogether, as some did when the GDPR took effect in 2018. I’m reminded of all the banners I continue to see on US news sites and online shops with something equivalent to 'Sorry, this content is unavailable in your country.’ Might we also see one day 'Sorry, Google is not available in your country?'

I don't have all the answers, and while I think the possibility of an immediate 'Splinternet' is low, I think it's important to at least have a fuller picture of how the choices that we make to absolutely protect some rights will likely have many unintended impacts on many others, and potentially on billions of people outside of the EU.

You can read everything on my new substack: https://careylening.substack.com/p/welcome-to-the-splinternet

#gdpr #legal #law #splinternet #Schrems #dataprotection #EU #privacyabsolutism #privacy

Head in the Clouds? A Brief Note on Transfers to the US in a Privacy-Absolutist World

After the Dutch National Cyber Security Centre published the Greenberg Traurig analysis of data transfers and the US CLOUD Act (https://lnkd.in/gmcvtCsP), we at Castlebridge HQ re

https://knowligence.info/head-in-the-clouds-a-brief-note-on-transfers-to-the-us-in-a-privacy-absolutist-world/

#Article46 #datatransfers #GDPR #SCCs #UnitedStates #decision #EU #guidance #privacyabsolutism #transfers #US