On October 27, 2016, the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) authorized the transfer of personal data to the U.S. according to the EU-US Privacy Shield.
With its decision, the Italian DPA has aligned itself with to the European Commission’s decision of adequacy, which recognized the Privacy Shield as granting an adequate level of protection (pursuant to Article 25 of Directive 95/46/EC) so allowing the data transfer under the Privacy Shield from the EU to organizations in the U.S. participating in the program.
The Italian DPA reserved the right to verify the data transfers and to adopt, if necessary, the measures provided by the Italian Privacy Code. The EU Commission will monitor the Privacy Shield to see if the US continues to ensure an adequate level of protection for the transfer of EU personal data. The check will take place on an annual basis, as well as after the entry into force of the GDPR.
Document nr 5652873 of the Garante per la Protezione dei Dati Personali is available in Italian at http://www.garanteprivacy.it… Open PDF
More information on the Privacy Shield is available at http://www.technethics.com…
Originally published on Technethics in November 2016