On 10 July, the European commission adopted its adequacy decision for the EU-US Data Privacy Framework. The decision states that the US offers an adequate level of protection (similar to the protection offered by the GDPR) for personal data transferred from European to US companies under the new framework. This decision is particularly important for US multinational enterprises which would e.g. transfer HR data form their European seats to the US. However, it remains unclear whether it will survive the scrutiny of the Court of Justice of the European Union (CJEU).
The GDPR requires data protection safeguards before you can transfer personal data outside of the EU. This can be a very complicated process, that’s why the GDPR grants the Commission the power to adopt… Read more
