On July 10, 2023 the European Commission published its final Adequacy Decision for EU-US data transfers. The draft decision reflects the multi-year coordination between the EU and the US to identify and implement a lasting solution to facilitate international data transfers following the Court of Justice of the European Union’s judgment in Schrems II.
As part of this process, the US has completed its obligations under the Executive Order 14086 on Enhancing Safeguards for United States Signals Intelligence Activities. Recent activities to complete the US. obligations include the US Attorney General declaring the EU, Iceland, Liechtenstein, and Norway to be “qualifying states,” which is required for the redress mechanism to be available to individuals from those jurisdictions, and the office of the Director of National Intelligence confirming that the US Intelligence Community has adopted its policies and procedures as required under the Executive Order.
The EU’s adequacy decision determines that the US, through the newly created EU-US Data Privacy Framework, provides comparable safeguards to those of the EU and ensures an adequate level of protection for personal data transferred from the EU to certified organizations in the US.
Join OneTrust DataGuidance, Sidley, and a panel of expert representatives from the European Commission and DoJ to discuss the finalized EU-US DPF.
Key takeaways will include:
- Discussion of significant points and implications of the European Commission Adequacy Decision for the Data Privacy Framework
- What organizations should know about the Framework’s Principles
- Consideration of factors and logistics for signing up for the Framework, including interplay with current Privacy Shield membership
- Other internal data transfer developments, including adequacy decision for the UK-US Data Bridge and
- Next steps in the EU and UK processes, and predictions for the future