EU-US Data Privacy Framework Adopted By The European Commission (Third Time's A Charm?)

On July 10th 2023, the European Commission announced the adoption of its adequacy decision for the EU-US Data Privacy Framework (DPF). This decision signifies that the US ensures a level of data protection comparable to that of the EU, allowing for the safe and secure transfer of personal data from the EU to US companies participating to the DPF. However, the adoption of the adequacy decision has not been without criticism, with non-profit organizations such as None of Your Business (NOYB), founded by Austrian lawyer and privacy activist Max Schrems, raising concerns regarding its effectiveness. This article examines the key elements of the DPF, its practicalities, and the criticisms it has (already) faced.