Privacy Shield was recently replaced by the Data Privacy Framework Program, a mechanism for legally transferring personal data from the European Union, the United Kingdom (and Gibraltar), Switzerland, or other participating countries to the United States. Designed by the U.S. Department of Commerce to support transatlantic commerce in coordination with the European Commission, these mechanisms promote greater transparency around international data processing and enable U.S. businesses to demonstrate that their privacy practices meet data protection requirements such as GDPR, including enhanced protections for consumers. Privacy Shield was officially replaced by the Data Privacy Framework Program on July 2023.

• July 2020: The Schrems II decision invalidated Privacy Shield.
• Between Schrems II and the launch of Data Privacy Framework Program, as negotiations took place between the U.S. and the EU, BBB National Programs and the U.S. Department of Commerce continued to deliver services under Privacy Shield. See the full timeline of activity from then until today on our timeline.
• July 2023: The Data Privacy Framework Program officially replaces Privacy Shield. IRMs like BBB National Programs will ensure a seamless transition for participating businesses. 

The Data Privacy Framework Program helps U.S. businesses receive and process personal data from the European Union, the United Kingdom (and Gibraltar), Switzerland, or other participating countries after self-certifying their adherence to the protections set out in the program Principles. Your public self-certification with the U.S. Department of Commerce will ensure that European organizations and consumers know your business provides enhanced privacy protection when: 

• You are expanding your operations into Europe and collecting EU, U.K., or Swiss customer data; 
• You are processing EU, U.K., or Swiss data in the U.S. for a business partner; or 
• In other situations where your business is using personal data of EU, U.K., or Swiss individuals. 

U.S. businesses that have committed to uphold the Principles must provide an independent dispute resolution service to EU, U.K., or Swiss individuals whose personal data they process in the United States. BBB National Programs is an approved IRM that can help businesses of all sizes meet this requirement. 

Benefits for your business: 

• Demonstrated expertise in data privacy for more than 20 years.  
• Practical assistance to businesses of all sizes in navigating program requirements and the self-certification and recertification processes.
• Ensures prompt responses to privacy inquiries and complaints. 

Benefits for your consumers: 

• BBB National Programs is the most trusted name in consumer dispute resolution. 
• Online complaints process provides accessible, transparent dispute resolution, enhancing customer service. 
• Services always provided free of charge to EU or Swiss individuals. 
• Speedy, impartial resolution through our staff conciliation process or independent Data Privacy Review.