IAPP Global Summit 2026: Privacy | AI governance | Cybersecurity law
WASHINGTON, DC
30 March-2 April
The EU-U.S. Data Privacy Framework: Looking Ahead
Monday, 30 March
15:30 - 16:30 EDT
Intermediate level
After years of negotiations and legal challenges that struck down its two predecessors, the EU-U.S. Data Privacy Framework went into effect in 2023. Along with parallel agreements with the United Kingdom and Switzerland, the DPF provides a framework under which U.S. businesses can transfer the data of customers across the Atlantic without running afoul of European data protection laws such as the General Data Protection Regulation. To accomplish this, the U.S. agreed to a number of safeguards for its signal intelligence activities regarding European data subjects. Unlike predecessor frameworks Safe Harbor and Privacy Shield, many observers believe these safeguards will allow the DPF to withstand judicial scrutiny. This panel will explore the underpinnings and implementation of the DPF, the experiences of businesses that have participated in the program in its first few years, and the importance of transatlantic data flows to the global digital economy.
What you will learn:
- Understand the history and development of the DPF and the rise and fall of its predecessor frameworks.
- Appreciate the experiences of businesses that have participated in the DPF and the value of unencumbered transatlantic data flows to the digital economy.
- Knowledgeably contribute to future policy and legal debates as the DPF charts its path forward.
Moderator and speakers

Brian Scarpelli
Senior Global Policy Counsel
ACT | The App Association

Alex Greenstein
Director, Data Privacy Framework
U.S. Department of Commerce, International Trade Administration

Morgan Stevens
CIPP/A, CIPP/C, CIPP/CN, CIPP/E, CIPP/US
Privacy Fellowship Manager
Innovators Network