EU adopts Privacy Shield replacement for U.S. data transfers

Global data

The European Commission on Monday announced it adopted a new agreement with the United States to allow for transatlantic data flows without fear of violating the European Union’s General Data Protection Regulation (GDPR).

The EU-U.S. Data Privacy Framework allows for participating companies to transfer data between the two regions without having to put in place additional data protection safeguards, said the European Commission in a press release. The framework was agreed to in principle in 2022 after previous iterations, including the Privacy Shield, were scrapped by the Court of Justice of the European Union (CJEU) over U.S. surveillance concerns.

The new framework seeks to address those concerns through safeguards limiting access to EU data by U.S. intelligence services and the formation of a review court that can call for the deletion of EU citizens’ data if it is found to be collected in violation of the safeguards. The framework advanced to adequacy despite pushback from European Parliament and others as part of the approval process.

lock iconTHIS IS MEMBERS-ONLY CONTENT. To continue reading, choose one of the options below.