On Wednesday 9 October, the European Commission published a report examining the adequacy of the EU-US ‘Data Privacy Framework’ (DPF) for personal data transferred from the European Union to organisations in the United States.
According to the information collected, the DPF’s implementation across the Atlantic is proceeding well, with the United States having, at this stage, put in place “all the constitutive elements of the framework”.
This includes “the implementation of safeguards to limit access to personal data by US intelligence services to what is necessary and proportionate to protect national security, and the establishment of an independent and impartial redress mechanism”, the Commission explains in detail in its press release.
The DPF was put in place in 2023, after several years of uncertainty following the Court of Justice of the European Union’s annulment of the two texts previously supposed to guarantee the protection of European personal data in the United States, the ‘Privacy Shield’ and the ‘Safe Harbor Framework’.
At the end of 2023, the European Parliament spoke out against the DPF’s application in its current terms. The MEPs, along with a number of European lawyers and the European Data Protection Board, emphasised in particular the different perceptions of proportionality and necessity on each side of the Atlantic.
See the report: https://aeur.eu/f/dsr (Original version in French by Isalia Stieffatre)