Adequacy decision on the EU-US Data Privacy Framework

14 settembre 2023

On 10 July, 2023, the European Commission adopted its adequacy decision for the EU-US Data Privacy Framework. On the basis of the  adequacy decision,  personal data can flow freely from the EU to companies in the United States that participate in the Data Privacy Framework.

The adequacy decision followed the adoption of Executive Order on ‘Enhancing Safeguards for United States Signals Intelligence Activities’ by US President Biden on 7 October and a Regulation issued by the US Attorney General. These instruments  introduced new binding safeguards to address the points raised by Court of Justice of the European Union in its Schrems II decision of July 2020, ensuring that data can be accessed by U.S. intelligence agencies only to the extent necessary and proportionate and establishing an independent and impartial redress mechanism to handle and resolve complaints from Europeans concerning the collection of their data for national security purposes.

The safeguards that have been put in place by the US Government in the area of national security (including the redress mechanism) apply to all data transfers under the GDPR to companies in the US, regardless of the transfer mechanims used. These safeguards therefore also faciliate the use of other tools, such as standard contractual clauses and binding corporate rules.

Archivio news


News dello studio



Nuovi bandi INAIL per Modelli 231 come mezzo di prevenzione dei rischi

  E’ notizia di questi giorni la riapertura di bandi INAIL (anche a fondo perduto) per l’adozione di Modelli ex D.Lgs. 231/01. Nell’ottica di sostenere interventi in materia



Financial and Payment Services

The EDPS published two Opinions: one on the proposal for a Regulation on a Financial Data Access Framework and one on the proposal for a Regulation and Directive on payment



EDPB adopts Guidelines on data transfers subject to appropriate safeguards under the Law Enforcement Directive

During its latest plenary, the EDPB adopted Guidelines on Art. 37 of the Law Enforcement Directive (LED). These Guidelines aim to provide practical guidance on the application of Art. 37 LED concerning

News Giuridiche