1、 Adopted EDPB Report on the first review of the European Commission Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework Version 1.1 Adopted on 4 November 2024 Adopted 2 Version 1.1 14 November 2024 Minor correction Version 1.0 4 November 2024 Adop

2、tion of the report Adopted 3 TABLE OF CONTENTSTABLE OF CONTENTS Executive summary.4 1 INTRODUCTION.6 2 ON THE COMMERCIAL ASPECTS OF THE EU-U.S.DPF.7 2.1 Self-certification process;oversight and supervision of compliance with the Principles.7 2.2 Complaint-handling,independent recourse mechanisms and

3、 arbitration.8 2.3 Guidance and cooperation.9 2.4 Relevant legal developments in the U.S.10 3 ON THE ACCESS AND USE OF PERSONAL DATA TRANSFERRED UNDER THE DECISION BY U.S.PUBLIC AUTHORITIES.12 3.1 Implementation of necessity and proportionality.12 3.1.1 Internal policies and procedures.12 3.1.2 Upda

4、tes of legitimate objectives.14 3.1.3 Prior independent authorisation of bulk collection.14 3.2 Re-authorisation of Section 702 FISA.15 3.2.1 Expansion of“electronic communication service provider”.16 3.2.2 Changes regarding the role of amici curiae.17 3.3 Redress mechanism.18 3.3.1 Developments rel

5、ating to the redress mechanism.18 3.3.2 Independence of the DPRC.19 3.3.3 Standard response.20 3.4 Government access to commercially available data.20 4 CONCLUSIONS&RECOMMENDATIONS.22 Adopted 4 EXECUTIVE SUMMARY On 10 July 2023,the European Commission adopted its adequacy decision for the EU-U.S.Dat

6、a Privacy Framework.Article 3 of the adequacy decision requires the Commission to regularly review the decision,with the first periodic review to take place after one year from the date of the notification of the adequacy decision to the Member States.In line with Recital 212 of the adequacy decisio