IAPP Europe Congress 2026
Privacy | AI governance | Cybersecurity law
Brussels
16-19 November
Conference
18-19 Nov.
Training
16-17 Nov.
Workshops
17 Nov.
The EU-U.S. Data Privacy Framework: Looking Ahead
Thursday, 19 Nov.
09:45 - 10:45 CET
Intermediate level
After years of negotiations and legal challenges that struck down its two predecessors, the EU-U.S. Data Privacy Framework went into effect in 2023. Along with parallel agreements with the United Kingdom and Switzerland, the DPF provides a framework under which U.S. businesses can transfer the data of customers across the Atlantic without running afoul of European data protection laws such as the General Data Protection Regulation. To accomplish this, the U.S. agreed to a number of safeguards for its signal intelligence activities regarding European data subjects. Unlike predecessor frameworks Safe Harbor and Privacy Shield, many observers believe these safeguards will allow the DPF to withstand judicial scrutiny. This panel will explore the underpinnings and implementation of the DPF, the experiences of businesses that have participated in the program in its first few years, and the importance of transatlantic data flows to the global digital economy.
What you will learn:
- The history and development of the DPF and the rise and fall of its predecessor frameworks.
- The experiences of businesses that have participated in the DPF and the value of unencumbered transatlantic data flows to the digital economy.
- The knowledge to contribute to future policy and legal debates as the DPF charts its path forward.
Featured in this session

Alex Greenstein
Director, Data Privacy Framework
U.S. Department of Commerce, International Trade Administration

Louisa Klingvall
Acting Head of Unit, International Affairs and Data Flows
European Commission

Brian Scarpelli
Senior Global Policy Counsel
Association for Competitive Technology