What is the new EU-US Data Privacy Framework?

The EU-US data privacy framework refers to a new legal framework that governs the transfer and protection of personal data between the European Union (EU) and the United States (US). 

On July 10, 2023, the European Commission adopted an adequacy decision for the new EU-US Data Privacy Framework. It replaces the defunct EU-US Privacy Shield that was invalidated by the Court of Justice of the European Union (CJEU) in July 2020, in what is commonly known as the Schrems II decision.

US companies that are eligible can join the DPF program by certifying their compliance with the DPF Principles through the new website set up by the Department of Commerce (DoC). US organizations that are already registered under the EU-US Privacy Shield will be automatically transferred to the DPF program.