Regulatory Watch  /  European Union  /  FRAMEWORK UPDATE
Moderate impactFRAMEWORK UPDATEAnnounced

EU and US announce new Trans-Atlantic Data Privacy Framework amid 23 years of illegal transfers

The European Commission and the United States agreed in mid‑July 2023 on a new Trans‑Atlantic Data Privacy Framework (TADPF), a successor to the invalidated Safe Harbor and Privacy Shield. noyb reports that most EU data protection authorities have failed to act on 101 GDPR complaints about unlawful data transfers since the CJEU rulings in 2015 and 2020, with only Sweden imposing fines.

Why it matters: The announcement of TADPF comes as EU data protection authorities continue to stall on enforcing CJEU decisions that deem past EU‑US data transfers illegal.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
23 years of illegal data transfers due to inactive DPAs and new EU-US deals
noyb · primary source · Aug 14, 2023
Details
JurisdictionEuropean Union
RegulatorEuropean Commission
CourtCourt of Justice of the European Union (CJEU)
LawGeneral Data Protection Regulation
StatusAnnounced
PublishedAugust 14, 2023
Effectivenot stated
PenaltyTele2 had to pay one million euros, the online retailer CDON 25,000 euros.
OrganisationsGoogle, Meta, Tele2, CDON, Irish Data Protection Commission, Swedish Data Protection Authority
Topicscross border transfer, tracking, privacy
Datapersonal