Following on the developments of the EU-U.S. Data Privacy Framework (DPF) earlier this summer, the U.S. Department of Commerce has now included an extension to this scheme, which will now regulate the transfer of personal data from the United Kingdom (and Gibraltar) to the United States, in addition to the current transfers from the European Union. The new stipulations come into effect as of October 12, 2023.
This extension, often referred to as the ‘Data Bridge’, will allow employers currently certified under the DPF to expand their certification to include the transfer of personal data of their existing workforce to the United States. The move is seen as particularly beneficial for multinational corporations, who will now have a streamlined framework bridging the UK and the US.
Multinational employers, particularly those working within the realms of the law, must stay abreast of these changes and familiarise themselves with the implications of the new Data Bridge. Those neglecting to do so may find themselves falling foul of regulations, and potentially facing hefty fines.
For further reading and a more detailed exploration on the subject, including implications and requirements under the new framework, you can read more at JDSupra.
As data protection continues to be a hot topic in international law, developing a keen understanding of such frameworks is an imperative for any corporation dealing with personal data. It is expected that additional nations may be included in similar bilateral agreements in the future, moving us closer to a global standard for data protection.