On 10 July 2023, the EU Commission adopted an adequacy decision in favour of the US. The decision extends to US commercial entities which participate in the Data Privacy Framework (Framework). The Framework will be administered by the US Department of Commerce, which will process applications for certification under the scheme.
The privacy advocacy group None of Your Business has been quick to confirm that it will be challenging the Framework, describing it as “largely a copy of the failed “Privacy Shield””, so it seems fair to say the saga will continue, especially given the ammunition already provided by the European Parliament and the EDPB!
