EU-US Privacy Shield

The EU-US Privacy Shield decision was adopted on 12 July 2016 and the Privacy Shield framework became operational on 1 August 2016. This framework protects the fundamental rights of anyone in the EU whose personal data is transferred to the United States for commercial purposes. The framework also brings legal clarity for businesses relying on transatlantic data transfers.

The new arrangement includes

  • strong data protection obligations on companies receiving personal data from the EU
  • safeguards on US government access to data
  • effective protection and redress for individuals
  • an annual joint review by EU and US to monitor the correct application of the arrangement.

The first annual review took place in September 2017 and, on that basis, the Commission published on 18 October 2017 a report on the functioning of the Privacy Shield.


DownloadPDF - 297.1 KB
DownloadPDF - 1.6 MB