Data Privacy Framework Self-Assessment & Certification

In July 2023, the Data Privacy Framework (DPF) was deemed adequate, establishing a basis for the transfer of personal data to the United States by businesses in Switzerland, Europe, and the UK – and the first question companies asked was: will the DPF survive legal challenges?

It looks like it will.

In October 2023, the European Union General Court ruled against interim measures to pause the implementation of the EU-U.S. Data Privacy Framework.

Now is the time to Self-Certify and we can help!

DPSA will deliver:

• Assessment – a custom DPF Self-Certification Assessment Questionnaire that will address all requirements of the 7 DPF Principles, and document policies and processes in the following areas:

1. 1. 1. Notice
      2. Choice
      3. Accountability for Onward Transfer
      4. Security
      5. Data Integrity and Purpose Limitation
      6. Access
      7. Recourse, Enforcement and Liability
      8. Review of the UK Extension to the EU-U.S. DPF (as applicable)

• Remediation – for any gaps identified, DPSA will provide a recommended remediation measure, with required and best practice recommendations. DPSA will also provide guidance on recommended changes or additions and describe how a specific requirement could be interpreted to fulfill the goals of the relevant policy.
• Notice – draft all required DPF disclosures for the website Privacy Notice.
• Certification – assist the Company with preparation of its self-certification filing with the US Department of Commerce and responding to any follow up questions or needs.