The European Commission has concluded that the United States continues to ensure an adequate level of protection for personal data transferred under the Privacy Shield from the Union to organisations in the United States. The second annual review by the EU commission has adopted a Decision (the “adequacy decision”) in which it found that the EU-U.S. Privacy Shield (the “Privacy Shield”) ensures an adequate level of protection for personal data that has been transferred from the EU to organisations in the U.S. The present report concludes the second annual review of the functioning of the Privacy Shield.
The report, as well as the accompanying Staff Working Document (SWD(2018) 497), cover all aspects of the functioning of the Privacy Shield, also in light of developments that took place during the last year. A central element of the Commission’s assessment was the implementation of its recommendations from the first annual review.