On July 10, 2023, the European Commission officially adopted its adequacy decision for the new EU-U.S. Data Privacy Framework, concluding that the U.S. ensures an adequate level of protection for personal data transferred from the EU to U.S. organisations participating in the EU-U.S. Data Privacy Framework.
This allows EU organizations to freely transfer personal data that is subject to the GDPR to participating organizations in the U.S.
This is the third adequacy decision adopted by the European Commission with regards to data transfers to the U.S., with the previous two adequacy decisions (with respect to the “U.S.-EU Safe Harbour” and the “EU-U.S. Privacy Shield”) having been invalidated by the Court of Justice of the European Union.
Please click here to continue reading on the Cleary Cybersecurity and Privacy Watch blog.