On July 10, 2023, the EU Commission approved the EU-U.S. Data Privacy Framework (“EU-US DPF”) as a valid transfer mechanism for sharing personal data from European Economic Area countries (those in the EU plus Iceland, Liechtenstein and Norway) to the United States. The UK and Switzerland are also anticipated to adopt localized rules extending the EU-US DPF to those jurisdictions.
The UK has signaled intent to adopt its extension to the EU-US DPF but have not (as of this article) completed all necessary approvals.
Eligible organizations wishing to make their initial self-certification under the new frameworks (including those with inactive certifications under EU-US Privacy Shield) can do so beginning on July 17, 2023, by visiting the ITA’s Data Privacy Framework website at www.dataprivacyframework.gov.
We continue to monitor for the latest updates and are available to support your company in connection with lawful data transfers under the EU-US DPF and the UK Extension, and Swiss-US DPF or other approved data transfer mechanisms.