After the ECJ invalidated the former EU-US Privacy Shield, businesses who operate cross- border have been waiting to get another EU-US Adequacy decision which will enable a sound legal basis for cross- Atlantic data flows.
They stress that GDPR will prevail and the DGA does not create a new legal basis for processing of personal data, also adding that national Data Protection Authorities remain key to handle any data protection issue.