EU–US Finalise Landmark Data Privacy Framework to Protect Cross-Border Transfers
EU–US Finalise Landmark Data Privacy Framework to Protect Cross-Border Transfers

Aug 25, 2025

EU–US Finalise Landmark Data Privacy Framework to Protect Cross-Border Transfers

The European Union and the United States have reached a major milestone in digital governance by finalising the Trans-Atlantic Data Privacy Framework. It is an agreement designed to safeguard the personal data of EU residents when transferred to the U.S. This new framework replaces the invalidated Privacy Shield, which was struck down by the European Court of Justice in 2020 over concerns that U.S. surveillance practices failed to meet EU privacy standards. 

The European Union and the United States have reached a major milestone in digital governance by finalising the Trans-Atlantic Data Privacy Framework. It is an agreement designed to safeguard the personal data of EU residents when transferred to the U.S. This new framework replaces the invalidated Privacy Shield, which was struck down by the European Court of Justice in 2020 over concerns that U.S. surveillance practices failed to meet EU privacy standards. The need for a strong data-sharing mechanism has grown increasingly urgent. Transatlantic data flows underpin an estimated $7.1 trillion in economic activity, supporting everything from cloud services and e-commerce to financial transactions and digital communications. Without a legal foundation for data transfers, businesses on both sides of the Atlantic risk regulatory uncertainty and operational disruption. The new framework introduces stricter rules governing how U.S. intelligence agencies can access EU citizens’ data. It emphasises proportionality, transparency, and oversight, requiring that any surveillance be limited to what is necessary for national security. Crucially, it establishes an independent Data Protection Review Court in the U.S., which will allow EU residents to seek redress if they believe their data has been misused. U.S. authorities have committed to collecting personal data only under defined conditions and to implementing multiple layers of procedural safeguards. The framework also outlines clearer obligations for U.S. companies that receive EU data, including compliance with privacy principles aligned with the EU’s General Data Protection Regulation (GDPR). This agreement is seen as a critical step toward restoring trust in transatlantic data flows. It provides legal certainty for thousands of companies and reassures EU citizens that their data will be treated with respect and accountability even when processed outside Europe. As digital economies become more interconnected, the EU–US data privacy framework sets a precedent for how democratic nations can cooperate to balance innovation, security, and individual rights. Its success will depend not only on legal implementation but also on sustained transparency and enforcement.    

📰 Mini Headlines ――――――――――――――

 🔏 Massive Data Breach Exposes Afghans and British Troops in the UK 

A serious data breach at the UK’s Jet Centre has exposed personal details of over 3,700 Afghans resettled under the UK’s relocation scheme, along with British military personnel and officials. The leaked spreadsheet reportedly contained names, birthdates, passport numbers, and contact details, raising grave security and privacy concerns. Many affected individuals had fled Taliban persecution and now face renewed risks. The UK Ministry of Defence has launched an investigation, while critics are calling for stronger safeguards in handling sensitive refugee and military data.  Digital Breach Read More → https://english.mathrubhumi.com/news/india/massive-data-breach-exposes-thousands-of-afghans-settled-in-the-uk-british-troops-uvz99ycy  

 

🕵️ TikTok Faces Fresh EU Investigation Over China Data Transfer 

TikTok is under renewed scrutiny in Europe as regulators investigate whether the platform unlawfully transferred user data to China. The probe, led by Ireland’s Data Protection Commission, focuses on whether TikTok violated the EU’s General Data Protection Regulation (GDPR) by failing to ensure adequate safeguards for cross-border data flows. This marks the second major EU investigation into TikTok’s data practices, following earlier concerns about child privacy and algorithmic profiling.  Unlawful Data Transfer   Read More →   https://www.msn.com/en-us/money/other/tiktok-faces-fresh-european-privacy-investigation-over-china-data-transfers/ar AA1Immmh?apiversion=v2&noservercache=1&domshim=1&renderwebcomponents=1&wcseo=1&batchservertelemetry=1&noservertelemetry=1   


📈Global Data Protection Market to Hit $568.92 Billion by 2032 

According to a report by SNS Insider, the global data protection market is projected to reach USD 568.92 billion by 2032, driven by rising cybersecurity threats, widespread cloud adoption, and stricter regulatory compliance. Enterprises are investing heavily in data encryption, breach detection, and privacy management tools to meet evolving legal standards and protect sensitive information. The Asia-Pacific region is expected to see the fastest growth, while North America remains the largest market. Global Data Protection Market Read More →    https://www.globenewswire.com/fr/news-release/2025/08/14/3133345/0/en/Data-Protection-Market-to-Reach-USD-568-92-Billion-by-2032-Driven-by-Cybersecurity-Needs-Cloud-Adoption-and-Regulatory-Compliance-Report-by-SNS-Insider.html?utm_blog=page%2F9%2F&utm_    


🔏 IIT Roorkee Data Breach Sparks Concern Over Campus Cybersecurity  

A recent data breach at IIT Roorkee has exposed vulnerabilities in the cybersecurity infrastructure of India’s higher education institutions. The breach reportedly compromised student records and internal communications, prompting calls for stronger digital safeguards across universities. Experts warn that academic institutions often lack robust data protection protocols, making them easy targets for cyberattacks. The incident is being seen as a wake-up call for the education sector to prioritise cybersecurity, invest in secure systems, and train staff in digital risk management. Data Breach Read More →   https://indianexpress.com/article/opinion/columns/iit-roorkee-data-breach-a-wake-up-call-education-institutions-10190827/  

© 2024-25 GoTrust | Proudly made in India

info@gotrust.tech

India

41, Block A, Industrial Area, Sector 62, Noida, Uttar Pradesh 201301

UAE

DIFC Innovation Hub, Gate Avenue, Zone D, Co-working Space Level 1 Al Mustaqbal St, Dubai

Netherlands

Cuserpark Amsterdam, De Cuserstraat 91, 1081CN, Amsterdam, Netherlands

© 2024-25 GoTrust | Proudly made in India

info@gotrust.tech

India

41, Block A, Industrial Area, Sector 62, Noida, Uttar Pradesh 201301

UAE

DIFC Innovation Hub, Gate Avenue, Zone D, Co-working Space Level 1 Al Mustaqbal St, Dubai

Netherlands

Cuserpark Amsterdam, De Cuserstraat 91, 1081CN, Amsterdam, Netherlands

© 2024-25 GoTrust | Proudly made in India

info@gotrust.tech

India

41, Block A, Industrial Area, Sector 62, Noida, Uttar Pradesh 201301

UAE

DIFC Innovation Hub, Gate Avenue, Zone D, Co-working Space Level 1 Al Mustaqbal St, Dubai

Netherlands

Cuserpark Amsterdam, De Cuserstraat 91, 1081CN, Amsterdam, Netherlands