EU-US Privacy Shield

The EU-US Privacy Shield decision was adopted on 12 July 2016 and the Privacy Shield framework became operational on 1 August 2016. This framework protects the fundamental rights of anyone in the EU whose personal data is transferred to the United States for commercial purposes. The framework also brings legal clarity for businesses relying on transatlantic data transfers.

The new arrangement includes

  • strong data protection obligations on companies receiving personal data from the EU
  • safeguards on US government access to data
  • effective protection and redress for individuals
  • an annual joint review by EU and US to monitor the correct application of the arrangement.

Privacy Shield annual review

The European Commission is committed to reviewing the arrangement on an annual basis to assess its continued level of adequacy for the protection of personal data.

DownloadPDF - 319.4 KB

DownloadPDF - 644.3 KB

DownloadPDF - 257.9 KB


DownloadPDF - 297.1 KB
DownloadPDF - 1.6 MB