On 10 July 2023, the European Commission adopted Adequacy Decision: EU-US Data Privacy Framework (Commission Press Release). The adequacy decision concludes that the US ensures an adequate level of protection, comparable to that of the EU, for personal data transferred from the EU to US companies under the new framework. This means that personal data can be transferred from the EU to US companies participating in the framework without the need for additional data protection safeguards.
While the US is not currently included in the list of countries or territories covered by the UK's adequacy regulations (as set out in ICO UK GDPR Guidance: International transfers), the government announced on 8 June 2023 that the UK and US have committed in principle to facilitate the free flow of personal data between both countries through a 'data bridge' for the UK Extension to the EU-US Data Privacy Framework (Government Press Release).
Want to view more content like this? Or view the previous features? Sign up for a Free Trial to our service.