The new DPC website is currently under construction. Our latest guidance in relation to GDPR, which comes into effect on 25th May, 2018, can be found at gdprandyou.ie and via pages on this website starting with "NEW" as per the navigation pane on the left. All other material on this site relates to the previous legislative regime under the Data Protection Acts 1988-2003 ("the Acts"). While the Acts may continue to apply in some circumstances, as of 25th May, 2018 the GDPR is the primary piece of legislation governing data protection.

Data Protection Commission
EU - U.S. Privacy Shield
The EU-US Privacy Shield scheme became operational on 1 August 2016 after the European Commission issued its formal decision that the Privacy Shield provides adequate protection to allow personal data to be transferred to the United States.
The EU-U.S. Privacy Shield imposes stronger obligations on U.S. companies to protect Europeans’ personal data. The Privacy Shield requires the U.S. to monitor and enforce more robustly, and cooperate more with European Data Protection Authorities. It includes written commitments and assurance regarding access to data by public authorities.
The Department of Commerce in the US, which will oversee certification under the scheme, has launched a dedicated website that offers advice. It is important to remember that if the company you want to transfer data to is not certified, the protections of the Privacy Shield won’t apply.
You can contact this Office about the Privacy Shield by emailing privacyshield@dataprotection.ie . However, complaint forms should be submitted by post to the following address:
Privacy Shield,
Office of the Data Protection Commissioner,
Canal House,
Station Road,
Co Laois..
If you have a concern about the way your data has been handled when it was transferred to the United States using the Privacy Shield, there are specific redress mechanisms for individuals. 
Directly with the company: Companies must reply to complaints from individuals within 45 days.