EU-U.S. Data Privacy Framework (update)

Further to my previous post, please note that as of 17 July 2023, eligible organisations in the United States that wish to self-certify their compliance pursuant to the UK Extension to the EU-U.S. DPF may do so; however, they may not begin relying on the UK Extension to the EU-U.S. DPF to receive personal data transfers from the United Kingdom (and Gibraltar) before the date that the United Kingdom’s anticipated adequacy regulations implementing the data bridge for the UK Extension to the EU-U.S. DPF enter into force. Organisations that wish to participate in the UK Extension to the EU-U.S. DPF must also participate in the EU-U.S. DPF.