EDPB welcomes improvements to EU-US data transfer framework
The European Data Protection Board (EDPB) published its non-binding opinion to the new Data Privacy Framework, which aims to provide the legal framework for transatlantic data flows. The EDPB welcomed “substantial improvements” while expressing concern and requesting clarification on several points.
Remaining concerns refer to “certain rights of data subjects, onward transfers, the scope of exemptions, temporary bulk collection of data and the practical functioning of the redress mechanism.” The European Commission published its draft adequacy decision on 13th December 2022. Both Parliament and the EDPB can present non-binding opinions for the European Commission to consider towards its adequacy decision. The Draft Adequacy Decision is based on the EU-U.S. Data Privacy Framework (DPF) – meant to replace the Privacy Shield invalidated by the CJEU in the Schrems II judgment.