Today, U.S. Secretary of Commerce Gina Raimondo and EU Commissioner for Justice and Consumers Didier Reynders made the following statement regarding the first periodic review of the EU-U.S. Data Privacy Framework:

Representatives from the United States Government, the European Commission, and EU data protection authorities are meeting in Washington D.C. on July 18 and 19 to conduct the first review of the EU-U.S. Data Privacy Framework (DPF). U.S. participation in the review included representatives from the Department of Commerce, Department of Justice, Office of the Director of National Intelligence, Federal Trade Commission, and Department of Transportation. EU participants included representatives from the European Commission’s Directorate General for Justice and Consumers and the European Data Protection Board. Independent recourse mechanisms, oversight bodies and DPF participants also participated to provide feedback to government officials.

The review marks one year since the DPF went into effect and is a testament to the United States’ and EU’s ongoing commitment to the framework. Over the last year, the United States and EU have closely cooperated on the administration and implementation of the DPF. Already, this collaboration has yielded success.

The DPF has strengthened the protection of privacy across the Atlantic, including through the creation of a new national security redress mechanism.  In addition, it has facilitated data flows that underpin more than 1 trillion dollars in EU-U.S. trade and investment. Since the DPF’s implementation in July 2023, more than 2,800 enterprises have joined the framework, 70 percent of which are small and medium-sized businesses.

The DPF first review provides an opportunity to verify that the different elements of the framework are in place and function effectively. The review covers all aspects of the framework, from compliance by companies with its privacy requirements and the enforcement of those protections, to the functioning of the Data Protection Review Court before which individuals in the EU/European Economic Area can obtain redress with respect to U.S. signals intelligence activities. In addition, it allows both sides to discuss legal developments relevant to the DPF in the area of privacy and government access to data.

The European Commission is preparing its report on the functioning of the Data Privacy Framework. The publication of the report concludes the review process.