OneTrust

On July 10, 2023, the European Commission adopted its adequacy decision for the EU-US Data Privacy Framework. It came after 18 months of negotiations following the invalidation of its predecessor, the EU-US Privacy Shield.  The EU-US DPF restores an important mechanism for the cross-border transfer of personal data and introduces limitations on US surveillance agencies’

The European Commission’s adequacy decision for the EU-US Data Privacy Framework is the latest chapter in the story of trans-Atlantic data transfers. While the adoption of such a decision has been long anticipated, its arrival has thrown up several questions about applicability, certification, impact, and other poignant topics related to the framework. These are your