Special Service Guide Update for December 16, 2020

The Court of Justice of the European Union has issued a ruling regarding data transfers from the European Union to the United States which invalidates the EU-US Privacy Shield as a mechanism to transfer personal data from the EU to the US. However, the CJEU also confirmed that companies can continue to rely on Standard Contractual Clauses (also known as model clauses) as a valid mechanism for transferring data from the EU. Following the CJEU’s ruling, the Swiss Federal Data Protection and Information Commissioner determined that the Swiss-US Privacy Shield is also no longer a valid mechanism of transfer for transferring personal data from Switzerland to the United States.

Since first published, Fastly’s Data Processing Terms (DPT) have incorporated the SCCs as a mechanism of transfer where the Privacy Shield did not apply and Fastly customers relying on the DPT were not at risk of using an invalid mechanism of transfer after the CJEU ruling.

While Fastly continues to abide by the Privacy Shield Framework, we have updated our Privacy Policy and Data Processing Terms as of December 16, 2020 to remove reference to the Privacy Shield as a transfer mechanism for personal data in light of the recent changes in the law.

Our documentation archive contains PDF snapshots of docs.fastly.com site content as of the above date. Previous updates can be found in the archive as well.