EU-US Data Privacy Framework

Datum

31.07.2023

Številka

07121-1/2023/1003

Kategorije

Prenos osebnih podatkov v tretje države ali mednarodne organizacije

The Information Commissioner (Slovenian National Supervisory Body for Personal Data Protection; hereinafter: IC) would like to thank you for your suggestion to address the European Commission to take additional measures to protect the privacy of individuals in the light of EU – US Data Protection Framework.

The IC would like to inform you that it is well aware of the recently adopted Adequacy Decision on EU – US Data Privacy Framework. The IC also wishes to share with you that it exercises its powers regarding cross-border processing of personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679) and within the framework of the European Data Protection Board (EDPB).

Individuals (data subjects) in the EU whose data are transferred to the US based on the Adequacy Decision have several redress mechanisms at their disposal if they consider that the US organisation concerned does not comply with the Data Privacy Framework. Data subjects in the EU can also submit a complaint to their national data protection authority to make use of the new redress mechanism in the area of national security.

The Data Privacy Framework also provides EU individuals with several new rights (e.g. to obtain access to their data, obtain correction or deletion of incorrect or unlawfully handled data).

More information is available in the EDPB Information note:

https://edpb.europa.eu/system/files/2023-07/edpb_informationnoteadequacydecisionus_en.pdf

Kind regards,

Mojca Prelesnik

Information Commissioner of the Republic of Slovenia