One year after the adoption of the EU-U.S. Data Privacy
Framework ("DPF"), the European Data Protection Bord
("EDPB") has published FAQs aimed at clarifying the
constraints on European companies transferring personal data to the
United States.
Ever since the GDPR came into force, the issue related to the
extra-European transfer of personal data has always assumed extreme
importance, also in view of the stratified European and national
pronouncements on the subject; in this context, the transfer of
data to the United States is particularly relevant.
Aiming to fill the gap left by the "fall out" of the
notorious Privacy Shield, on July 10, 2023, the European Commission
approved the Adequacy Decision for the Data Privacy Framework
("DPF"), intended to ensure an adequate level of
protection for personal data transferred from the EU to U.S. member
companies, without requiring European entities to implement
additional data protection measures.
