In August 2020, following the CJEU’s Schrems II ruling, a total of 101 complaints were lodged with European Supervisory Authorities by the privacy campaign group, NOYB, in relation to transfers of personal data to the USA through the use of “Google Analytics” and “Facebook Business Tools” and the subsequent processing of personal data that follows as a result.

In September 2020, the EDPB set up a task force to ensure a consistent approach in handling the complaints (the 101 Task Force).

The EDPB has now published a report on the outcome of the 101 Task Force’s work. The report sets out the common positions of the 101 Task Force members and information on the outcomes of the first cases considered. Amongst other things, several DPAs have ordered website operators to comply with the requirements of Chapter V of the GDPR, and if necessary, to stop the transfers in question.

The EDPB says that the positions of the DPAs expressed in this report do not represent the position of the EDPB. In addition, the positions taken do not prejudge the analysis that will have to be made by the DPAs in respect of each complaint and each tool. To read the EDPB’s press release in full and for a link to the report, click here.