European Commission issues Privacy Shield legal texts

The European Commission has issued the legal texts that will put in place the EU-US Privacy Shield, including Privacy Shield Principles which companies have to abide by, and a draft ‘adequacy decision’ of the Commission which, once adopted, will confirm that a third country ensures an adequate level of protection of personal data by reason of its domestic law and international commitments and that personal data can flow from the EU member states to such country, without any further restrictions. The next step is for the Article 29 Working Party – which gathers EU data protection authorities – to issue an opinion.