US Data Privacy Framework

Also known as: DPF, Data Privacy Framework, EU-US DPF, Privacy Shield successor

EU-US, UK-US and Swiss-US Data Privacy Framework — US International Trade Administration (ITA), Department of Commerce

Official site Official change log Subscribe to US Data Privacy Framework (RSS)

The self-certification programme US organisations join to receive personal data from the EU, the UK and Switzerland: a set of principles on notice, choice, onward transfer, security and access, enforceable by the FTC once an organisation certifies to them. Its standing rests on adequacy decisions that are themselves under periodic review, which is what makes changes to it consequential. Changes are followed through the EU adequacy decision of 10 July 2023: its periodic reviews, corrections, and the court cases brought against it. The UK and Swiss arrangements are not covered by that record.