EU Commission Sets Deadline For The U.S. To Cure Privacy Shield Deficiency

The EU Commission published its second annual review of the EU-US Privacy Shield program which is designed to allow personal data flows from the EU to organizations in the U.S. that are certified under the Privacy Shield program.

The review found that the U.S. Department of Commerce, which administers the Privacy Shield program, has further strengthened the Privacy Shield certification process and introduced new oversight procedures, such as random spot-checks for certified organizations. The report also found that the U.S. Federal Trade Commission (FTC), which is primarily responsible for regulatory enforcement of the Privacy Shield program, has been taking more a proactive approach to compliance monitoring.