Last 10 July 2023, the European Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework. The decision concludes that the United States ensures an adequate level of protection – comparable to that of the European Union – for personal data transferred from the EU to US companies under the new framework. On the basis of the new adequacy decision, personal data can flow safely from the EU to US companies participating in the Framework, without having to put in place additional data protection safeguards.
In Switzerland, the State Secretariat for Economic Affairs (SECO) is currently working on a Swiss variant of this agreement with the USA. Until then, federal bodies and private companies should continue to rely on standard contractual clauses (SCC).