(Image credit: Getty Images) The UK-US data bridge came into effect in October 2023, marking a significant step toward harmonizing data protection standards between the United Kingdom and the United States. What is the EU’s Cyber Resilience Act (CRA)? The UK-US data bridge was established under the Data Protection Act (DPA) 2018 and acts as an extension to the EU-US Data Privacy Framework (DPF), the long-awaited replacement to the EU-US Privacy Shield . It allows businesses to transfer personal data between the two territories without putting in place further safeguards, such as standard contractual clauses (SCCs), or carrying out a transfer risk assessment. Transferring personal data across the Atlantic would otherwise be prohibited under the UK General Data Protection Regulation (GDPR) . To be eligible for the UK-US Data Bridge, US companies must participate in the DPF, and both U.K. and U.S. organizations will be required to carry out tasks such as checking their data protection policies and certifying to the Data Privacy Framework List. RECOMMENDED VIDEOS FOR YOU… UK-US data bridge: Improved protections The UK government is confident the data bridge will ensure that personal data transferred from the UK to the US will be adequately protected, while legal experts say that various efforts have been made to improve privacy protections compared to the previous transfer regimes which were nullified by the Court of Justice of the European Union (CJEU). Alex Hazell, head of legal and privacy for EMEA at Acxiom, tells ITPro that European citizens’ US redress has been strengthened and a US law change requiring surveillance to be “proportionate” has been implemented. Addressing these concerns at the start could help to keep the UK-US data bridge from the fate of the EU-US privacy shield, which was invalidated by the European Court of Justice in 2020 due […]
Click here to visit source. Is the UK-US data bridge doomed to fail?