Privacy Shield was a data protection agreement between the EU and the United States. Until July 2020, it provided a legal basis for transferring personal data from the EU to the US.
The agreement was intended to ensure that US companies maintained a level of data protection comparable to the GDPR. In its “Schrems II” judgment , however, the European Court of Justice declared Privacy Shield invalid because protection in the US was insufficient, particularly against access by US authorities.
Since then, personal data may be transferred to the US only under certain conditions — for example, on the basis of Standard Contractual Clauses or, since July 2023, the EU–US Data Privacy Framework, which replaced Privacy Shield.
Relevance to tracking and Web analytics: Many tools, including Google Analytics and Meta, rely on US infrastructure. Anyone using these services should understand the rules that currently apply to international data transfers.