EU-US Legal Guidance Assessment (US Entities)

Yes, data collected in the EU may be transferred to the US only if the recipient in the US can demonstrate they have adequate data privacy and security measures in place to protect such data appropriately.

Yes, data transfers of data collected within the EU may be made where the European authorities have decided that a third country, a territory in that third country, or an international organization ensures adequate safeguards for data protection.

Yes, and in more ways than one. For starters, the EU has a broad data privacy regulation, the GDPR, which applies to all organizations collecting data on EU residents, whether they’re based in the EU or not. Secondly, per the GDPR, organizations may only collect data under strict conditions and with a legitimate purpose. The US, on the other hand, currently lacks an all-encompassing federal data privacy regulation.