The EU-U.S. Data Privacy Framework: Is the Dragon Eating its Own Tale?

Research output: Chapter in Book/Report/Conference proceedingBook chapterResearchpeer-review

The European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework (DPF), adopted on July 10th, 2023, marks a crucial moment in transatlantic data protection. Following an Executive Order issued by President Biden in October 2022, this decision confirms that the United States (U.S.) meets European Union (EU) standards for personal data protection. The decision extends to all transfers from the European Economic Area (EEA) to U.S. entities participating in the framework, promoting privacy rights while facilitating data exchange. Key aspects include oversight of U.S. public authorities’ access to transferred data, the introduction of a dual-tier redress mechanism, and granting new rights to EU individuals, encompassing data access and rectification. However, the EU-U.S. DPF presents both promise and challenges in health data transfers. While streamlining exchange and aligning legal standards, it grapples with the complexities of divergent privacy laws. The recent bill for the introduction of a U.S. federal privacy law emphasizes the urgent need for ongoing reform. Lingering concerns persist regarding the EU-U.S. DPF’s resilience, especially amid potential legal battles before the Court of Justice of the EU (CJEU). The history of transatlantic data transfers between the EU and the U.S. is riddled with vulnerabilities, reminiscent of the Ouroboros – an ancient symbol of a serpent or dragon eating its own tail – hinting at the looming possibility of the framework facing invalidation once again. This article delves into the main requirements of the EU-U.S. DPF and offers insights on how healthcare organizations can navigate it effectively.
Original languageEnglish
Title of host publicationInternational Transfers of Health Data: A Global Perspective
EditorsMarcelo Corrales Compagnucci, Mark Fenwick
Number of pages21
Place of PublicationSingapore
PublisherSpringer Nature Singapore
Publication statusSubmitted - 2024
SeriesPerspectives in Law, Business and Innovation

ID: 388727104