On July 10, 2023, the European Commission (“EC”) adopted its adequacy decision for the EU-U.S. Data Privacy Framework (“DPF”), ushering in a new era of transatlantic data flows. Key points: Adequacy Decision  The adequacy decision finds that,...

On December 13, 2022, the European Commission (the “Commission”) released a draft adequacy decision for the EU-U.S. Data Privacy Framework (“Framework”). The draft decision proposes the Framework as a new transfer mechanism for EU-U.S. data flows...

Today, the U.S. took a giant step toward resolving the “Schrems II” EU data transfer problem, possibly allowing the United States to earn a partial adequacy determination from the European Commission early next year. President...

The European Union and the United States announced an agreement in principle on a successor to the EU-U.S. Privacy Shield framework for the transfer of personal data to the U.S. The Court of Justice of the...

The Bavarian Data Protection Authority (DPA) declared that a German company’s transfer of email addresses to U.S.-based email service Mailchimp was unlawful in light of the 2020 “Schrems II” decision issued by the Court of Justice of the...

Per the European Data Protection Board’s (EDPB) draft recommendations on data transfers following the Schrems II decision, data exporters and importers must work together to determine whether the importer country’s law ensures an essentially equivalent level of...

The European Data Protection Board (“EDPB”) plans to release further guidance in the coming months on specific steps that companies can take to export personal data from the European Economic Area to locations in the...

While not outright eliminating the Swiss-U.S. Privacy Shield, the Swiss Data Protection Authority, the Federal Data Protection and Information Commissioner (FDPIC), announced in a position paper on September 8, 2020 that he no longer considers the Swiss-U.S....

This article was originally published in the IAPP Daily Dashboard on August 19, 2020. By invalidating the EU-U.S. Privacy Shield but not rejecting wholesale the use of standard contractual clauses to transfer data to the U.S., the...