Rights and recourse under the EU-US Data Privacy Framework

The EU-U.S. Data Privacy Framework (EU-U.S. DPF) grants data subjects rights regarding the processing of their personal data transferred to the United States by certified U.S. entities, such as the right of access, the right to erasure, the right to rectification, and the right to redress.

Therefore, if you wish to exercise your rights under the EU-U.S. DPF against a US company, association or organisation that adheres to the EU-U.S. DPF, you can contact them directly.

In addition to the rights and remedies available against certified US companies (Section I), the EU-US DPF provides for a recourse mechanism in cases of alleged illegal access to personal data by US intelligence agencies (Section II).

Last update