On November 10th 2020, the European Data Protection Board (EDPB) published recommendations that supplement transfer tools to so-called third countries outside the EU and the EEA. On July 16th 2020, the ECJ ruled that the transfer of personal data on the basis of the EU-US Privacy Shield is not permissible and that users must carry out their own effectiveness test when using EU standard contractual clauses. In the decision, the ECJ also clarified that data transfers to the USA are no longer possible solely on the basis of EU standard contractual clauses. This poses considerable problems for companies and organizations.