EU-US Privacy Shield

The adequacy decision on the EU-US Privacy Shield was adopted on 12 July 2016 and the Privacy Shield framework became operational on 1 August 2016. This framework protects the fundamental rights of anyone in the EU whose personal data is transferred to the United States for commercial purposes. It allows the free transfer of data to companies that are certified in the US under the Privacy Shield.

The Framework includes:

  • strong data protection obligations on companies receiving personal data from the EU
  • safeguards on US government access to data
  • effective protection and redress for individuals
  • an annual joint review by EU and US to monitor the correct application of the arrangement.

Privacy Shield annual reviews

The European Commission reviews the arrangement on an annual basis to assess its continued level of adequacy for the protection of personal data.

DownloadPDF - 319.4 KB

DownloadPDF - 644.3 KB

DownloadPDF - 257.9 KB


DownloadPDF - 755.5 KB
DownloadPDF - 297.1 KB
DownloadPDF - 1.6 MB