Data Privacy Framework
We support you in obtaining EU-U.S. Data Privacy Framework self-certification.
The requirements of Chapter 5 of the GDPR for data transfers to recipients in third countries pose particular challenges for internationally active organisations. For data transfers to recipients in the US, the European Commission, in cooperation with the US Department of Commerce, has developed the Data Privacy Framework (DPF).
If the data recipients in the US participate in this framework, the advantages of an adequacy decision pursuant to Art. 45 GDPR apply to data transfers to these recipients. To this end, compliance with certain data protection principles under the DPF must be confirmed to the US Department of Commerce.
Flexible solution for international companies
This may be particularly important for transatlantic companies with branches in both Europe and the U.S. Central data flows to the group headquarters in the US can be made more agile and legally secure – keyword “One Company.”
In such cases, DPF certification of US group companies can be a flexible solution and an important component of modern and functioning data protection management. Requirements for employee data protection and co-determination can be met with the necessary sensitivity. Customer data can be processed flexibly within a uniform standard.
Comprehensive support for self-certification
Our team of consultants has many years of experience in assisting U.S. companies in the self-certification process for the Data Privacy Framework and its predecessors.
As part of relevant projects, we provide support in documenting relevant data flows, assessing compliance with DPF principles and necessary follow-up measures, developing DPF policies, training the responsible U.S. personnel—on site if desired—and handling the formalities of self-certification and annual review and recertification.
We would be happy to work with you and your American colleagues to develop a project approach that is right for you.
