GDPR Glossary Also known as: DPF, EU-US DPF
The 2023 adequacy framework allowing transfers to certified US organisations.
The EU–US Data Privacy Framework (DPF) is the adequacy mechanism, in force since 2023, that permits personal-data transfers to US organisations that self-certify to its principles.
It replaced the invalidated Privacy Shield; transfers to non-certified US recipients still need SCCs and a TIA.
In the Regulation
Related terms
Adequacy decisionA European Commission decision that a non-EU country offers adequate data protection, allowing free transfers there.International data transferSending personal data outside the EEA — allowed only with a valid transfer mechanism.Standard Contractual ClausesPre-approved contract terms that provide a safeguard for transferring personal data outside the EEA.
Need this applied to your business?
Our data-protection lawyers turn GDPR terms into a working plan.