thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

EU-U.S. Data Privacy Framework (DPF)

Framework adopted by the European Commission in July 2023 allowing transfers to self-certified US organizations.

Definition

The DPF replaced the invalidated Privacy Shield. US organizations self-certify with the Department of Commerce and commit to privacy principles enforced by the FTC or DOT. Executive Order 14086 added limits on US signals intelligence and a Data Protection Review Court for redress. The EU General Court dismissed a challenge to it in September 2025, though further appeal is possible.

Example

A US analytics vendor certifies under the DPF so EU clients can transfer data without SCCs.

Exam tip

DPF adequacy applies only to organizations on the DPF list.

Related terms