European Union: Adopted report following the first review of the adequacy decision for the EU-US Data Privacy Framework

On 9 October 2024, the European Commission released a report following its first review of the adequacy decision for the EU-US Data Privacy Framework, which governs the transfer of personal data from the European Union (EU) to organisations in the United States (US). The report finds that US authorities have implemented the necessary components of the framework, including safeguards to ensure that access to personal data by US intelligence agencies is limited to what is necessary and proportionate for national security purposes. It also highlights the establishment of an independent and impartial redress mechanism for individuals, enabling them to challenge unlawful data processing. In addition, the report makes several recommendations to ensure the framework's continued effectiveness, including encouraging the development of joint guidance between US authorities and EU data protection authorities.