Katie Reid

Aug 16, 2023 | lexology.com | Miriam Everett |Claire Wiseman |Duc Anh Tran |Angela Chow |Asmita Singhvi |Sara Lee | +1 more

As mentioned in a last-minute entry to our June Data Wrap, on 10 July 2023, the European Commission adopted its long-awaited adequacy decision for the EU-US Data Privacy Framework (“DPF“), determining that data transfers pursuant to the DPF benefited from an adequate level of data protection. This means that personal data can now freely flow to organisations participating in the DPF without the need for transfer impact assessments or the EU standard contractual clauses (“SCCs), for example.

Jun 7, 2023 | lexology.com | Miriam Everett |Claire Wiseman |Duc N. Tran |Angela Chow |Lauren Wilkinson |Katie Reid

On 22 May 2023, following the adoption of a binding decision by the EDPB, the Irish Data Protection Commissioner (“DPC“) concluded its own-volition inquiry against Meta regarding the legality of international data transfers from Meta Ireland to the US. The DPC concluded that such transfers infringed the GDPR and directed Meta to suspend its transfers to the US within six months of the decision and bring its transfers into compliance with the GDPR.