European Union: Adopted EDPB report on the adequate protection of personal data under the EU-US data privacy framework

On 4 November 2024, the European Data Protection Board (EDPB) adopted the report on the first review of the European Commission's implementing decision regarding the EU-US data privacy framework. The report assesses the commercial aspects of the framework, including the United States (US) Department of Commerce’s actions to enhance the self-certification process and complaint-handling mechanisms. The report also evaluates the access by US authorities to personal data, noting improvements in safeguards like necessity and proportionality under US law. The report notes concerns about the clarity of legal provisions and government access to data from commercial entities. The EDPB stresses the importance of continued monitoring, particularly of the redress mechanism and the practical application of safeguards.