With its decision, the Italian DPA has aligned itself with to the European Commission’s decision of adequacy, which recognized the Privacy Shield as granting an adequate level of protection (pursuant to Article 25 of Directive 95/46/EC) so allowing the data transfer under the Privacy Shield from the EU to organizations in the U.S. participating in the program.
The Italian DPA reserved the right to verify the data transfers and to adopt, if necessary, the measures provided by the Italian Privacy Code. The EU Commission will monitor the Privacy Shield to see if the US continues to ensure an adequate level of protection for the transfer of EU personal data. The check will take place on an annual basis, as well as after the entry into force of the GDPR.
More information on the Privacy Shield is available at http://www.technethics.com…
For more information, Francesca Giannoni-Crystal.