ObjectiveThe ground-breaking judgment of the CJEU Schrems v Data Protection Commissioner is one more wake-up call that not much compromise is acceptable when it comes to privacy and data protection which are and will be high priorities of the political agenda of the EU legal order.Key topicsNew agreement for legal flow of data between the EU and the USAArticle 29 Working Party’s statement on transfer toolsThe new role of the Data Protection Authorities (DPAs) and supervision mechanismsThe Council of Europe and the European Court of Human Rights on arbitrary and abusive secret surveillance of mobile telephone communications (Zakharov v Russia, 7 December 2015)