07/13/2023
European Commission released EU-U.S. : is it the one?
𧬠This decision has a direct impact on the Industry: unlike the before it, the DPF principles also cover (or "key-coded") research (including when the key is not communicated to the US recipient organization) - i.e., A transfer of coded data from the EU to the US would be covered by the principles β
π Reminder: this self-certification system is not yet effective (they're still updating the website for now)
βοΈ This week, the European Commission issued an adequacy decision (effective immediately) declaring that the United States now provides an adequate level of protection for personal data transferred from the to companies participating in the EU-US Protection Framework (DPF).
β
US companies will be required to their compliance with a list of privacy obligations (e.g., purpose limitation, data minimisation, data retention), and will be monitored by the US Department of Commerce.
The operation of the EU-US DPF will be subject to periodic review.
π After the 's rulings of Schrems I and Schrems II, all eyes are on and a potential 3rd decision by the Court shortly (Schrems III?).
βπ© Contact MyData-TRUST - Data Protection & Privacy for Life Sciences if you have any question: [email protected]
Decision (full text): https://lnkd.in/eC2NUqF4
Press release: https://lnkd.in/eXque-yA
Highlights, press releases and speeches