The European Commission Adopts New Adequacy Decision For EU-US Data Flows - A UK Perspective

The UK and the US have committed in principle to establish a 'data bridge' for the UK extension to the EU-US Data Privacy Framework.

Summary

The long-awaited and revised EU-U.S. Data Privacy Framework ("DPF") dubbed 'Privacy Shield 2.0' was finally adopted on 10 July 2023. This follows the previous invalidation of the Safe Harbor and Privacy Shield schemes under the Schrems cases. The purpose of this framework is to ensure the US adopts an adequate level of protection comparable to that of the EU for personal data transferred from the EU to the US. This decision allows personal data to flow safely from the EU to US companies participating in the Framework, without having to put in place additional data protection safeguards. It is proposed that the UK-US 'Data Bridge' will be an extension to this agreement.