𝗘𝗨-𝗨.𝗦. 𝗗𝗮𝘁𝗮 𝗣𝗿𝗶𝘃𝗮𝗰𝘆 𝗙𝗿𝗮𝗺𝗲𝘄𝗼𝗿𝗸 𝗗𝗲𝗰𝗶𝘀𝗶𝗼𝗻

On July 10, 2023, the European Commission adopted a new adequacy decision on the EU-U.S. Data Privacy Framework. The decision concludes that the United States ensure an adequate level of protection – comparable to that of the European Union – for personal data transferred from EU to US companies under the new framework.

The Adequacy Decision will allow self-certified companies that adhere to the EU-U.S. Data Privacy Framework and commit to a set of privacy obligations to receive EU personal data without having to put in place additional transfer safeguards.

𝗔𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻: The functioning of the EU-U.S. Data Privacy Framework will be subject to periodic reviews, to be carried out by the European Commission, together with representatives of European data protection authorities and competent US authorities.

The first review will take place within a year of the entry into force of the adequacy decision (i.e. 2024), in order to verify that all relevant elements have been fully implemented in the US legal framework and are functioning effectively in practice.

𝗘𝗻𝘁𝗿𝘆 𝗶𝗻𝘁𝗼 𝗳𝗼𝗿𝗰𝗲: 10th July 2023