Adequacy decision: EU-US transfers of personal data

Key aspects

• This adequacy decision concludes that the US ensures an adequate level of protection comparable to the required EU standards for the transfer of personal data of EU residents to US companies participating in the EU-US Data Privacy Framework.
• All European entities wishing to transfer personal data to the US must ensure that they engage service providers that are properly certified and registered with the EU-US Data Privacy Framework.
• Personal data can then be transferred to companies participating in the EU-US Data Privacy Framework without having to apply additional data protection safeguards.