Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems

Holding (summary, not the official text)

Transfers under standard contractual clauses require essentially equivalent protection, assessed case by case including access by foreign authorities; authorities must suspend or prohibit transfers that cannot be protected; the Commission's SCC decision stays valid; the EU-US Privacy Shield decision is invalid.