Microfon with a purple background
16.03.2023 | KPMG Law Insights

Podcast series “KPMG Law on air”: Data protection after Schrems II – Companies under pressure to act

In 2013, a 25-year-old Austrian filed a lawsuit in an Irish court against a leading social media provider. The accusation was that the platform had forwarded his data to the parent company in the USA. The Irish court referred the case to the ECJ and the Austrian data protection activist named Maximilian Schrems got justice. The highest European court overturned the EU-US Privacy Shield and thus stopped the previous practice of transferring data to the USA. Data transfers to countries outside the EU are only permitted if a level of data protection comparable to the GDPR is guaranteed, the ECJ ruled. The EU Commission subsequently revised the standard contractual clauses for the transfer of personal data to third countries. Companies had until December 27, 2022 to adapt their contracts to the new clauses.


The data protection authorities ask

Not all companies are aware that they are transferring data to third countries because they are not always aware of where their service providers are storing and processing the data. But right now, the authorities are approaching the companies and asking. Those who are not yet using the new formulations should therefore hurry.

Leonie Schönhagen, attorney and manager at KPMG Law, and Dr. Daniel Taraz, attorney and senior manager at KPMG Law, talk in the podcast about what to do now, when to expect fines and in which cases exceptions apply.


The core topics of the podcast are:

  • From minute 1:48: What is behind “Schrems II”?
  • From minute 3:33: Have the majority of companies already adopted the EU Commission’s new contract clauses and what were or are the challenges?
  • From minute 5:23: What are the consequences of missing the transposition deadline?
  • From minute 6:27: Why the authorities are asking questions now and what they want to know from companies.
  • From minute 8:00: What is behind the abbreviation TIA?
  • From minute 8:56: What can companies do if the data protection risks in a country are unmanageable?
  • From minute 9:28: What should companies do now that have missed the implementation deadline?
  • From minute 11:20: Not all third countries are created equal – countries with adequacy decision
  • From minute 12:29: What is the impact of the U.S. “Executive Order”?

All “KPMG Law on air” episodes can be found here.

Explore #more

13.06.2024 | Press releases

Handelsblatt and Best Lawyers honor KPMG Law Experts

Best Lawyers has once again identified the best commercial lawyers in Germany for 2024 exclusively for Handelsblatt. A total of 28 lawyers were honored by…

27.05.2024 | KPMG Law Insights

Agreement on ecodesign regulation: products to become more sustainable

After lengthy negotiations, the Council and Parliament of the European Union reached a provisional agreement on the Ecodesign Regulation on the night of December 5,…

22.05.2024 | KPMG Law Insights

The AI Act is coming: EU wants to get a grip on AI risks

For many people, artificial intelligence (AI) is the great hope for business, healthcare and science. But there are also plenty of critics who fear the…

17.05.2024 | KPMG Law Insights

Podcast series “KPMG Law on air”: When the family business is to be sold

Around 38,000 family businesses are currently handed over each year. In most cases, the change of ownership takes place within the family. But more and…

03.05.2024 | KPMG Law Insights

Doubts about inability to work? What employers can do

The certificate of incapacity for work (AU certificate) serves as proof of incapacity for work due to illness. However, only if the certificate meets certain…

27.03.2024 | KPMG Law Insights

EU Buildings Directive: life cycle greenhouse potential becomes relevant

On March 12, 2024, the EU Parliament approved the amendment to the EU Buildings Directive. The directive obliges member states and, indirectly, building owners and…

19.03.2024 | Business Performance & Resilience, KPMG Law Insights

CSDDD: Provisional agreement on the EU Supply Chain Directive

The EU member states agreed on the CSDDD, the EU Supply Chain Directive, on March 15, 2024. Germany abstained from the vote. Negotiators from the…

21.02.2024 | KPMG Law Insights, KPMG Law Insights

The Digital Services Act – what does it mean for companies?

The Digital Services Act (DSA) is a key component of the EU’s digital strategy and came into force on November 16, 2022. As a regulation,…

15.02.2024 | KPMG Law Insights

Data compliance management: How to implement it in practice

Part 3 of the article series “Professional tips for data compliance management”   The third part of this series of articles deals with data compliance

14.02.2024 | Business Performance & Resilience, PR Publications

Guest article in ZURe: Monitoring the implementation of the LkSG

The current issue of ZURe (p. 20 ff.) contains a guest article by KPMG Law Partner Thomas Uhlig (Head of General Business and Commercial Law),…


Leonie Troost-Schoenhagen


THE SQUAIRE Am Flughafen
60549 Frankfurt am Main

tel: +4969951195923

Dr. Daniel Taraz

Senior Manager

Fuhlentwiete 5
20355 Hamburg

tel: +49 40 360994-5483

© 2024 KPMG Law Rechtsanwaltsgesellschaft mbH, associated with KPMG AG Wirtschaftsprüfungsgesellschaft, a public limited company under German law and a member of the global KPMG organisation of independent member firms affiliated with KPMG International Limited, a Private English Company Limited by Guarantee. All rights reserved. For more details on the structure of KPMG’s global organisation, please visit

 KPMG International does not provide services to clients. No member firm is authorised to bind or contract KPMG International or any other member firm to any third party, just as KPMG International is not authorised to bind or contract any other member firm.