EU-US Data Privacy Framework
The EU-U.S. Data Privacy Framework (“DPF”) covers two aspects of data transfer between the EU and the US.
First, it is a self-certification mechanism for companies in the U.S. where the European Commission considered that transfers of personal data from the EEA to companies in the U.S. certified under the DPF enjoy an adequate level of protection. As a result, personal data can be transferred freely to U.S. certified companies, without the need to put in place further safeguards or obtain an authorisation.
Second, it provides a redress mechanism for EU/EEA individuals in relation to alleged violations of U.S. law with respect to their data collected by U.S. authorities competent for national security.
The DPF provides for redress mechanisms in certain circumstances, and the appropriate documentation is provided below.
National Security redress mechanism
-
Information Note - On the redress mechanism for EU/EEA individuals in relation to alleged violations of U.S. law with respect to their data collected by U.S. authorities competent for national security EU-US Data Privacy Framework information note.
- EU-US DPF Complaint Form - U.S. Office of the Director of National Intelligence’s Civil Liberties Protection Officer (CLPO) - Redress mechanism for EU/EEA individuals in relation to alleged violations of U.S. law with respect to their data collected by U.S authorities competent for national security (Version: 17 April 2024) EU-US Data Privacy complaint form.
Commercial Company redress mechanism
If you have any questions or concerns about the processing of your personal data by a company certified under the DPF, you are encouraged to directly contact that company, as a first step. If your concern is not resolved by the company, or you have reasons to not address it directly to the company, you can contact any EEA national data protection authority (national DPA) and, in particular, the one in the country where you reside or work, or from where your personal data has been transferred to the U.S. For further information please see the F.A.Q, and model complaint form that follows.