The Schrems I and II cases: Explain what led the CJEU to invalidate the EU Decision 2000/520 and therefore the "Safe Harbor Principles", as well as the European Commission's adequacy decision for the EU-U.S. Privacy Shield Framework.

1. Case C-362/14 Maximillian Schrems v Data Protection Commissioner (ECR I, 6 October 2015), (skip para. 30-37) 2. Paul Roth, "Adequate Level of Data Protection in Third Countries Post-Schrems and under the General Data Protection Regulation" (2017) 25 Journal of Law, Information and Science 49