The EDPB Adopts Information Note Addressing Transfers of Data to the US and Statement on Japan Adequacy Decision Review

The European Data Protection Board (EDPB) recently adopted an information note for individuals and entities transferring data to the US. The note provides concise and objective information regarding the impact of the adequacy decision on transfers, the redress mechanisms available under the Data Privacy Framework and the new redress mechanisms in the area of national security. Additionally, a statement was adopted on the first review of the Japan Adequacy Decision. The EDPB highlighted that the Japanese legal framework requires changes to further converge with the GDPR, such as the extension of the right to object to a processing, strengthening the duty to notify data breaches and broadening the scope of the Japan Act on the Protection of Personal Information. It also welcomed the European Commission’s commitment to closely monitor some areas requiring further scrutiny, such as the use of consent in situations of imbalance of power. Lastly, the EDPB agreed with the European Commission’s assessment of the review and proposed a move to a review cycle of four years.