The European Commission Reports On The First Year Of The EU-US Data Privacy Framework

In July 2023, the European Commission adopted an adequacy decision for the EU-US Data Privacy Framework (DPF), as we previously reported. This permitted the free flow of personal data from the EU to DPF participating companies in the U.S.

There are a number of items that U.S. companies must perform to become DPF certified as outlined in our article here. On October 9, 2024, the European Commission issued a review of the adequacy decision of the EU-US DPF to the European Parliament and Council of Europe after its first year in force. Amongst other things, the European Commission noted that:

• More than 2,800 U.S. companies are DPF certified, in contrast to 2,400 companies under the previous EU-US Privacy Shield regime;