The European Commission published on 23 October its report on the third annual review of the EU-U.S. Privacy Shield, a regulatory framework that enables smooth data transfers between companies from the European Union and the United States despite the fact that the two countries operate in separate data protection jurisdictions.

The report highlights the success of the Privacy Shield, coming from an increased convergence between both parties’ systems.

The review focuses on lessons learnt from its practical implementation and confirms that the Americans continue to ensure an adequate level of protection for personal data transferred under the Privacy Shield.

The Commission also recommended concrete steps to better ensure the effective functioning of the Privacy Shield, such as strengthening the certification processes and developing additional guidance for companies related to human resources data.

The EU-US Privacy Shield Frameworks were designed by the Department of Commerce in the United States and the European Commission to provide companies on both sides of the Atlantic with a mechanism to comply with data protection requirements when transferring personal data from the European Union to the US.