Just today, the European Court of Justice declared (Schrems v Data Protection Commissioner, C-362/14) that the 2000 Commission decision which allowed the transmission of EU citizen's data to the United States is invalid. The decision, according to the Court, failed to show that the Commision had actually considered whether the United States guaranteed a level of protection of fundamental rights "essentially equivalent" to the one afforded in the European legal order.
See more extensively the excellent coverage by the Guardian here and, here (with some speculations on what the decision entails.
PS the case was initiated by the same guy whose other actions we had talked about some time ago.
