The Data Protection (Adequacy) (United States of America) Regulations 2023

Well the Government have acted fast on this one, Laid before Parliament on 21st September 2023 and coming into force on 12th October 2023.

What is this legislation? Basically an extension to the EU-US Data Privacy Framework (DPF), after all why reinvent the wheel when you can piggy-pack off existing legislation?

More information can be found here.

Do ensure that you check the Data Privacy Framework List, which records the organisations who have signed up to the EU-US Data Privacy Framework, and whether they are participating in the UK Extension. UK organisations intending to send personal data to US organisations under the framework should first check that the US organisation they are intending to send personal data to has signed up to the UK Extension to the EU-US Data Privacy Framework.

Hopefully this helps in negating the use of the International Data Transfer agreements and/or the addendum.