The EU-US Data Privacy Framework: Is the Dragon Eating Its Own Tail?

Marcelo Corrales Compagnucci ()
Additional contact information
Marcelo Corrales Compagnucci: University of Copenhagen

A chapter in International Transfers of Health Data, 2024, pp 17-39 from Springer

Abstract: Abstract The European Commission’s adequacy decision on the EU-US Data Privacy Framework (DPF)EU-US Data Privacy Framework (DPF), adopted on July 10th, 2023, marks a crucial moment in transatlantic data protection. Following an Executive Order issued by President Biden in October 2022, this decision confirms that the United States (US) meets European Union (EU) standards for personal data protection. The decision extends to all transfers from the European Economic Area (EEA) to US entities participating in the framework, promoting privacy rights while facilitating data exchange. Key aspects include oversight of US public authorities’ access to transferred data, the introduction of a dual-tier redress mechanism, and granting new rights to EU individuals, encompassing data access and rectification. However, the EU-US DPF presents both promise and challenges in health data transfers. While streamlining exchange and aligning legal standards, it grapples with the complexities of divergent privacy laws. The recent bill for the introduction of a US federal privacy law emphasizes the urgent need for ongoing reform. Lingering concerns persist regarding the EU-US DPF’s resilience, especially amid potential legal battles before the Court of Justice of the EU (CJEU). The history of transatlantic data transfers between the EU and the US is riddled with vulnerabilities, reminiscent of the Ouroboros—an ancient symbol of a serpent or dragon eating its own tail—hinting at the looming possibility of the framework facing invalidation once again. This chapter delves into the main requirements of the EU-US DPF and offers insights on how healthcare organizations can navigate it effectively.

Keywords: Data protection; EU-US Data Privacy Framework (DPF); GDPR; International data transfers; Privacy; Security (search for similar items in EconPapers)
Date: 2024
References: Add references at CitEc
Citations:

There are no downloads for this item, see the EconPapers FAQ for hints about obtaining it.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:spr:perchp:978-981-97-9983-1_2

Ordering information: This item can be ordered from
http://www.springer.com/9789819799831

DOI: 10.1007/978-981-97-9983-1_2

Access Statistics for this chapter

More chapters in Perspectives in Law, Business and Innovation from Springer
Bibliographic data for series maintained by Sonal Shukla () and Springer Nature Abstracting and Indexing ().