- 24.07.23
- Reading time: 2 Minuten
List of DPF-Certified Companies is published
On July 10, 2023, the new adequacy decision between the European Union and the United States, known as the Data Privacy Framework (DPF), entered into force. This new framework agreement represents a significant step forward in transatlantic data protection rules by allowing EU companies to transfer personal data to data importers in the United States. U.S. companies can now certify by demonstrating compliance with DPF principles. A transfer of personal data to the listed companies can henceforth take place without further approvals or additional measures such as SCC and BCR.
The official list of DPF certified companies is now published and can be viewed here: https://www.dataprivacyframework.gov/s/participant-search. Certified companies include major technology companies such as Google and Microsoft.
This has a direct impact on your company. If you pass on personal data to certified companies, it is mandatory to update the data protection notices stored on your websites. The data transfer is now based on the DPF and no longer on the EU Standard Contractual Clauses (SCC).
