EU-U.S. Data Privacy Framework: What Does It Mean For Businesses And What To Expect Going Forward?

On 10 July 2023, the European Commission adopted its adequacy decision for the United States.

The decision has been received positively by many, including the Norwegian Data Protection Authority for making it easy for businesses to transfer personal data at the same time as ensuring that measures are in place to protect individuals' rights. However, not everyone is on the same page and "Schrems III" might already be on its way.

Background

The previous adequacy decisions (Safe Harbour Framework and EU-U.S. Privacy Shield) for the United States have both been invalidated by the Court of Justice of the European Union ("CJEU") in the well-known Schrems I and Schrems II decisions respectively.