The EU-U.S. Data Privacy Framework

10 march 2023

The EDPB adopted its opinion on the draft adequacy decision regarding the EU-U.S. Data Privacy Framework. The EDPB welcomes substantial improvements such as the introduction of requirements embodying the principles of necessity and proportionality for U.S. intelligence gathering of data and the new redress mechanism for EU data subjects. At the same time, it expresses concerns and requests clarifications on several points. These relate, in particular, to certain rights of data subjects, onward transfers, the scope of exemptions, temporary bulk collection of data and the practical functioning of the redress mechanism. The EDPB would welcome if not only the entry into force but also the adoption of the decision were conditional upon the adoption of updated policies and procedures to implement Executive Order 14086 by all U.S. intelligence agencies. The EDPB recommends the Commission to assess these updated policies and procedures and share its assessment with the EDPB.

News archive

 

Firm news

lug13

13/07/2026

Annual activity report of Autorità per le Garanzie nelle Comunicazioni pursuant to art. 55 of the DSA

  AGCOM- Autorità per le Garanzie nelle Comunicazioni – the Italian Communications Authority has been formally designated as the Digital Services Coordinator for Italy by the

lug13

13/07/2026

Artificial intelligence: The Italian Data Protection Authority imposes a fine on Character.AI

The Italian Data Protection Authority has imposed a fine of 158,000 euros on Character Technologies Inc., a US company that operates Character.AI, a generative artificial intelligence service that

lug2

02/07/2026

Obblighi del titolare del trattamento in caso di uso di sistemi di AI

L' utilizzo di sistemi di AI per il trattamento dei dati comporta la necessita' per il Titolare del trattamento di rivedere ed aggiornare tutti la documentazione sulla privacy, ivi incluse le informative