Download as pdf or txt
Download as pdf or txt
You are on page 1of 2

EU-U.S.

DATA PRIVACY
FRAMEWORK

July 2023

Today, the European Commission adopted its adequacy decision on


the EU-U.S. Data Privacy Framework entering into force with
immediate effect.

Key principles
• Based on the adequacy decision, personal data will be able to flow
freely and safely between the EU and participating US companies

• A new set of rules and binding safeguards to limit access to data by US


intelligence authorities to what is necessary and proportionate to protect
national security; US intelligence agencies will adopt procedures to ensure
effective oversight of new privacy and civil liberties standards

• A new two-tier redress system to investigate and resolve complaints of Europeans


on access of data by US Intelligence authorities, which includes a Data Protection
Review Court

• Strong obligations for companies processing data transferred from the EU, which
includes the requirement to self-certify that they adhere to the standards through the US
Department of Commerce

• Specific monitoring and review mechanisms

Justice
and Consumers
Benefits of the framework
• Adequate protection of Europeans’ data transferred to the US,
addressing the requirements of the European Court of Justice

• Safe and secure data flows

• Durable and reliable legal basis

• Competitive digital economy and economic cooperation

• Continued data flows underpinning €900 billion in cross-border


commerce every year

March 2022: President von der Leyen


and President Biden reach an agreement
in principle on a new trans-Atlantic Data
Privacy Framework.
October 2022: President Biden signs the US
Executive Order on ‘Enhancing Safeguards for
United States Signals Intelligence Activities’.

December 2022: The Commission adopts its


draft adequacy decision on the EU-U.S. Data
Privacy Framework.
February 2023: The European Data
Protection Board adopts its opinion on the
draft adequacy decision.
May 2023: Non-binding resolution of the
European Parliament.

July 2023: Member States representatives


approve the draft adequacy decision.

July 2023: The Commission adopts its


adequacy decision on the EU-U.S. Data
Privacy Framework.

2024: First periodic review


of the framework.

© European Union, 2023


Reuse is authorised provided the source is acknowledged. The reuse policy of European Commission documents
is regulated by Decision 2011/833/EU (OJ L 330, 14.12.2011, p. 39). For any use or reproductionof elements
that are not owned by the European Union, permission may need to be sought directly from the respective
rightholders. images ©Gettyimages / Stone - PM Images / Maskot / Moment - Yuichiro Chino / Westend61

You might also like