Consider Joining The Insights Association Data Privacy Framework (DPF) Services Program
The EU-U.S. DPF, UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF were respectively designed to enable U.S. businesses to receive and process personal data from EU member countries, the United Kingdom, and Switzerland after self-certifying compliance with the participation requirements of those mechanisms, including adherence to the protections set out in the DPF Principles. A company's self-certification of compliance through the U.S. Department of Commerce and appearance on the public Data Privacy Framework List maintained by the Department of Commerce demonstrates to European organizations and consumers a serious commitment on the part of the company to protect personal information in accordance with a set of privacy principles that offer meaningful privacy protections and recourse for EU, UK, and Swiss individuals.
While joining the IA DPF Services Program is voluntary, once an eligible company self-certifies its compliance and makes the public commitment to adhere to the DPF Principles, the commitment will become enforceable under U.S. law. Research and data analytics companies that participate in the Department of Commerce’s DPF Program are obligated to protect the personal data of Europeans received under the relevant part(s) of the DPF Program.
The Insights Association is here to offer our member companies guidance they need to understand and meet participation requirements of the Data Privacy Framework.