The Department of Commerce’s International Trade Administration has issued an update with specific dates relating to the new EU-U.S. Data Privacy Framework (DPF):
- Effective Date: The DPF Principles went into effect as of July 10, 2023, the same day of the European Commission’s adequacy decision.
- Updates to Privacy Notices: For organizations that were already self-certified under the EU-U.S. Privacy Shield, they have until October 10, 2023 to update their privacy notices and comply with the EU-U.S. DPF Principles. Note that this doesn’t change any recertification due dates.
- New Certifications: The new DPF website www.dataprivacyframework.gov will be launched on July 17, 2023 and eligible organizations who wish to newly self-certify under the DPF can do so on this date.
- UK: Organizations can also certify under the UK Extension to the DPF on July 17, 2023, but they cannot rely on the UK Extension until the UK regulators provide an adequacy decision.
- Switzerland: Organizations can also certify under the Swiss-U.S. Data Privacy Framework on July 17, 2023, but they cannot rely on the Swiss-U.S. Data Privacy Framework for data transfers until the Swiss regulators provide an adequacy decision. Organizations will also need to update their privacy notices for compliance with the Swiss-U.S. Data Privacy Framework by October 17, 2023.
- Privacy Shield Website: This will be brought down on July 14, 2023 at 9:00 PM EST in preparation of the new DPF website described above. Accounts will be transferred over to the new website, but the old [email protected] email address should no longer be used and is being replaced with [email protected].
On behalf of the U.S. Department of Commerce, the International Trade Administration’s Privacy Shield Team would like to make you aware of important developments regarding the Privacy Shield program.
View referenced article
On July 10, 2023, the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework (EU-U.S. DPF) entered into force. The EU-U.S. DPF Principles entered into effect as of the same date.
Author(s)
Related Insights
October 5, 2026
Foley Viewpoints
Texas Comptroller’s Proposed Amendment to Eliminate Double Taxes on Data Processing Services
On September 30, 2026, the Texas Comptroller signed an executive order directing his office to amend the sales tax data processing services regulation, 34 Tex. Admin. Code § 3.330. The proposed amendment would remove marketplace and platform fees from the definition of taxable data processing services. The amendment is only at the proposal phase and has not yet been adopted.
October 5, 2026
Foley Viewpoints
Record Startup Shutdowns Reflect a Market That Is Moving Forward
This year, more venture-backed companies shut down than at any point on record, according to data published last week by Andreessen Horowitz. The largest share of those closures comes from companies founded between 2019 and 2021, a period when interest rates were near zero and capital was easy to raise.
October 2, 2026
Foley Viewpoints
Hard Things: Chris Yeh Says Physical AI Needs More R2-D2 and Less C-3PO
On September 28, 2026, together with our friends at Mavka Capital, Foley & Lardner Silicon Valley hosted the fourth installment of our “Hard Things” series for founders, funders and friends that are focused on building physical AI companies. The highlight of the evening was Mavka's Vitaly Golomb interview of Chris Yeh, co-author of “Blitzscaling,” about doing just that with companies building in the physical AI space.