EU–US Data Privacy Framework ("DPF") – European Data Protection Board (FAQ v 2.0)

On the 15th January 2026, the European Data Protection Board ("EDPB") adopted the updated v 2.0 of the FAQ on the EU-US Data Privacy Framework ("DPF") for European businesses and individuals. The updated FAQ provides revised guidance on aspects concerning the DPF and transfers of data from the EU to DPF certified companies across the_Atlantic.

Listed below are some of the key takeaways:

1. What is the DPF? The DPF is a self‑certification mechanism for US companies so that they can demonstrate they operate under defined privacy standards and that they offer an adequate level of protection. Transfers of personal data form the EEA to companies certified under the DPF enjoy an adequate level of protection and can occur unobstructed.