Het is zeker de moeite waard om de aanbevelingen eens door te lezen. De EDPB is vrij helder: er is vrijwel geen mogelijkheid om door te gaan met het verwerken van persoonsgegevens bij Amerikaanse cloud providers. (Nadruk van mij.) The CJEU held, for example, that Section 702 of the U.S.FISA does not respect the minimum safeguards resulting from the principle of proportionality under EU law and cannot be regarded as limited to what is strictly necessary. This means that the level of protection of the programs authorised by 702 FISA is not essentially equivalent to the safeguards required under EU law. As a consequence, if the data importer or any further recipient to which the data importer may disclose the data falls under 702 FISA, SCCs or other Article 46 GDPR transfer tools may only be relied upon for such transfer if additional supplementary technical measures make access to the data transferred impossible or ineffective. Use Case 6: Transfer to cloud services providers or other processors which ...