EU-US data transfer framework: European privacy authorities put forth caveats

The European Data Protection Board (EDPB) welcomed with reservations the new Data Privacy Framework, meant to provide the legal framework for transatlantic data flows. The Board that gathers the EU data protection authorities was established under the General Data Protection Regulation (GDPR) to provide guidance and resolve disputes related to cross-border enforcement. Its tasks also include advising the European Commission on data adequacy decisions, an instrument that recognises the privacy regime of a foreign jurisdiction as adequate by the EU’s data protection standards. “While we acknowledge that the improvements brought to the US legal framework are significant, we recommend to address the concerns expressed and to provide clarifications requested to ensure the adequacy decision will endure,” said the EDPB Chair Andrea Jelinek in a statement on Tuesday (28 February). “For the same reason, we think that after the first review of the adequacy decision, subsequent reviews should take place at least every three years and we are committed to contributing to them.”

https://www.euractiv.com/section/data-privacy/news/eu-us-data-transfer-framework-european-privacy-authorities-put-forth-caveats/