Unlocking Data Flows: EU-US Data Privacy Framework Receives Adequacy Decision

The European Commission has issued an adequacy decision for the EU-US Data Privacy Framework, allowing for the unrestricted flow of personal data from the EU to US companies participating in the framework. This decision comes after the adoption of new safeguards by the US government, aimed at addressing concerns raised by the Court of Justice of the European Union in its Schrems II decision.

The safeguards aim to ensure that data access by US intelligence agencies is limited to what is necessary and proportionate, with an independent redress mechanism in place for Europeans to address any complaints regarding the collection of their data for national security purposes. These safeguards apply to all data transfers under the GDPR, enabling the use of various tools, including standard contractual clauses and binding corporate rules.