1. Home
  2. News
  3. Is the EU-US Data Privacy Framework in danger?
  • Data Protection

Is the EU-US Data Privacy Framework in danger?

The issues surrounding the transfer of data to the USA have been known for a long time and are subject to constant fluctuations. As soon as political changes occur, this has always had an impact on the agreements at the time in the past. Therefore, the EU-US DPA should also be examined more closely with the current change of government.

The instrument that made the framework possible in the first place is Executive Order 14086, which in turn resulted in the so-called PCLOB - Privacy and Civil Liberties Oversight Board. This is a supervisory body that was set up to monitor the protection of citizens' rights. Following the election of US President Trump, however, all Democratic members were dismissed from this board. The consequence of this dismissal is that this body can no longer fulfill its original function and is effectively unable to work.

What does this mean in concrete terms for the agreement?

According to Art. 45 para. 4 GDPR, the EU Commission is required to monitor developments in third countries, which undoubtedly includes the USA. It must now determine whether, despite the changes to the EU-US DPF, a suitable legal basis for data transfer can still be established. Such monitoring and evaluation already took place in October 2024. A need for improvement was identified. The number of members of the PCLOB was also discussed. This is likely to be relevant again in the upcoming evaluation.

For the time being, this means that you cannot rely on the continued existence of the agreement.

In the meantime, it might make sense to check your US service providers and get an overview of them. If the EU-US DPF could indeed no longer provide a legal basis, alternative options such as the standard contractual clauses should be considered. Alternative providers could also be considered in the long term.

However, the agreement is currently still valid. We will inform you immediately of any changes.

About Cookies

This website uses cookies. Those have two functions: On the one hand they are providing basic functionality for this website. On the other hand they allow us to improve our content for you by saving and analyzing anonymized user data. You can redraw your consent to to using these cookies at any time. Find more information regarding cookies on our Data Protection Declaration and regarding us on the Imprint.
Mandatory

These cookies are needed for a smooth operation of our website.

Name Purpose Lifetime Type Provider
CookieConsent Saves your consent to using cookies. 1 year HTML Website
fe_typo_user Assigns your browser to a session on the server. session HTTP Website
PHPSESSID Temporary cookies which is required by PHP to temporarily store data. session HTTP Website
__cfduid missing translation: trackingobject.__cfduid.desc 30 missing translation: duration.days-session HTTP Cloudflare/ report-uri.com
Statistics

With the help of these statistics cookies we check how visitors interact with our website. The information is collected anonymously.

Name Purpose Lifetime Type Provider
_pk_id Used to store a few details about the user such as the unique visitor ID. 13 months HTML Matomo
_pk_ref Used to store the attribution information, the referrer initially used to visit the website. 6 months HTML Matomo
_pk_ses Short lived cookie used to temporarily store data for the visit. 30 minutes HTML Matomo
_pk_cvar Short lived cookie used to temporarily store data for the visit. 30 minutes HTML Matomo
MATOMO_SESSID Temporary cookies which is set when the Matomo Out-out is used. session HTTP Matomo
_pk_testcookie missing translation: trackingobject._pk_testcookie.desc session HTML Matomo