EU-US Data Privacy Framework adequacy decision, Article 1 (Commission Implementing Decision (EU) 2023/1795, Art 1)
Adequacy covers only US organisations on the DPF List. An organisation that is not listed cannot receive EU data on the DPF.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“For the purpose of Article 45 of Regulation (EU) 2016/679, the United States ensures an adequate level of protection for personal data transferred from the Union to organisations in the United States that are included in the 'Data Privacy Framework List', maintained and made publicly available by the U.S. Department of Commerce, in accordance with Section I.3 of Annex I.”
Where it was read
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in these 3 guides