EU And U.S. Reach Agreement In Principle On A Replacement For The EU-U.S. Privacy Shield

On March 25, 2022, the European Commission and the United States announced that they have reached an "agreement in principle" on a replacement for the EU-U.S. Privacy Shield, which was invalidated by the Court of Justice of the European Union in 2020.

The new framework will be designed to allow personal data to flow freely between the EU and participating U.S. companies, and will likely be seen as the main alternative to the "Standard Contractual Clauses" released by the European Commission last year.

Key elements of the new framework include:

• Obligations for companies processing data transferred from the EU to the U.S., which will include the requirement to self-certify their adherence to certain GDPR-like data protection principles, through the U.S. Department of Commerce;