On 10 July 2023, the European Commission adopted the adequacy decision for the EU-US Data Privacy Framework, which aims to enable the transfer of data between the countries and resolve the concerns raised by the EU Court of Justice in the annulment of Schrems II. The adequacy decision enters into force on the same day of its adoption. The was adopted following the adoption of the Executive Order on Enhancing Safeguards for United States Signals Intelligence Activities, implementing the agreement in principle reached by the parties. The adequacy decision specifies that the US legal framework provides comparable data protection safeguards to those in the EU based on the binding safeguards US has implemented. The US Executive Order established the principles by which signals intelligence activities are to be authorised and conducted. These principles specify that signals intelligence activities shall only be conducted for defined legitimate purposes if necessary and subject to oversight. Furthermore, the Executive Order established rules regarding the dissemination, processing, and retention of information collected as part of signals intelligence activities and includes a redress mechanism to enable individuals from "qualifying states" to obtain a review and redress if their personal information was collected and processed in violation of US law. The companies are able to join the Data Privacy Framework by committing to comply with data protection requirements, including deleting the personal data after it is no longer necessary for the purpose collected and processed and implementing safeguards when the data is transmitted to third parties.
Original source