The European Commission published a very significant adequacy decision last week, which is expected to facilitate transfers of personal information from Europe to the United States. The decision came as part of the Commission’s official recognition of a revised arrangement (the EU-US Data Privacy Framework) meant to provide protection of personal data at a level on par with the EU’s General Data Protection Regulation (GDPR).
This new adequacy decision means that American companies registered and recognized under the new DPF Program will be able to benefit from this recognition and transfer personal information from Europe to the United States without the restrictions that existed up until now. This is provided they assume enhanced obligations beyond the level prescribed in current US legislation.
