European Data Protection Board Publishes EU-U.S. Data Privacy Framework FAQs For Businesses And Individuals

In an effort to give greater clarity to the regulation of international personal data transfers from the EU to the U.S. on 16 July 2024, the European Data Protection Board ("EDPB") published two sets of FAQs relating to the EU-U.S. Data Privacy Framework ("DPF") for (i) businesses in the European Economic Area ("EEA"); and (ii) individuals in the EEA who have personal data transferred to a U.S. company under the DPF.

While both FAQs provide a high-level overview of the DPF, the business FAQs provide additional information for organisations to consider when transferring personal data to controllers or processors in reliance of the DPF, as well as subsidiaries of such organisations. The FAQs for European individuals provide information on the rights that may be exercised over personal data transferred in reliance of the DPF, and how complaints are handled under the DPF.