
The Article 29 Working Party, which unites the EU's data protection regulators, said in a statement that it was "absolutely essential" for EU members to take a common position on implementation of the court ruling. They called for the EU to open talks "urgently" with the US in order to find ways for data to be transferred between the countries while still respecting fundamental rights of the data subjects.
Until a new agreement can be reached, companies may continue to use standard contractual clauses and binding corporate rules to provide protection for subjects of data collection and transfer. The Article 29 group will start a review of these and other tools to assess the impact of the ECJ ruling. If no appropriate solution is found with the US by the end of January 2016 and depending on the results of the regulatory review, the EU data protection authorities said they are "committed to take all necessary and appropriate actions, which may include coordinated enforcement actions".
The group said that any data transfers still taking place under the Safe Harbour rules are unlawful. The privacy regulators will start information campaigns in order to alert businesses to the consequences of the court ruling.