Skip to content

Data Privacy Framework

What is Data Privacy Framework?

An international agreement that provides a mechanism for compliant cross-border transfers of personal data, replacing the previous Privacy Shield arrangement.

Privacy and Data Protection

Terms that appear alongside data privacy framework

Each of these is named in at least one of the same controls as data privacy framework. The number is how many controls name both.

Frameworks that govern data privacy framework

GDPRView framework →ISO 27001:2022View framework →

What the standards actually require on data privacy framework

Requirements naming data privacy framework across 6 standards, quoted from the control text.

Greece Law 4624/2019 - Hellenic Data Protection Authority (HDPA) Implementation Act2 controls

Greece Law 4624/2019 crosswalk to adjacent EU + Member State frameworks. EU GDPR + LEDP: Law 4624/2019 transposes/implements both directly; Greek-specific provisions supplement + do not override GDPR core.

GR-DPA-Crosswalk-EU-Adjacent-MemberStates · Greece Law 4624/2019 Crosswalk to GDPR, LEDP, EU Adjacent Frameworks and Member State Implementations →
Indiana Consumer Data Protection Act1 control

Coordination positions INCDPA within the broader US and international privacy regulatory landscape. (1) US State Privacy Law Patchwork: 20+ comprehensive US state privacy laws as of 2026 (California CCPA/CPRA + Virginia VCDPA + Colorado CPA + Utah UCPA + Conne...

INCDPA-Coord-USStatePrivacy-VCDPA-CPA-CTDPA-CCPA-Federal-FTC-DPDP-GDPR-International · Indiana CDPA Coordination - US State Privacy Laws (Virginia/Colorado/Connecticut/Utah/Texas/Iowa+) + Federal Sectoral (HIPAA/GLBA/FCRA/FERPA/COPPA) + FTC Section 5 + GDPR + India DPDP + International Privacy Frameworks →
Indonesia PDP Law1 control

Training + awareness + coordination operationalise UU PDP within Indonesia and across the regional + global regulatory landscape. Training and Awareness: mandatory cyber + privacy awareness training for all staff + role-specific training for IT + security + ex...

IDPdp-Training-Awareness-Coord-ASEAN-SingaporePDPA-APEC-CBPR-GDPR-Art70to76-MoCom-Transition · Indonesia PDP Training + Awareness + Indonesian Representative + Lembaga PDP Transition + Coordination ASEAN/Singapore PDPA/APEC CBPR/GDPR/India DPDP/Cross-Sectoral OJK/BI/BSSN →
Italy Personal Data Protection Code (Legislative Decree No. 196/2003, amended 2018)1 control

Cross-border transfer of personal data from Italy is governed by GDPR Chapter V + Italian Codice + Italian Garante guidance. (1) GDPR Chapter V Transfer Mechanisms: (a) Adequacy decisions per Commission - Andorra + Argentina + Canada (commercial organisations)...

ItalyCodice-CrossBorder-Transfer-Adequacy-SCCs-BCRs-Retention-ItalianSectorRules-EUDataAct · Italy Codice Cross-Border Transfer + EU Adequacy + Standard Contractual Clauses + Binding Corporate Rules + EU Data Act + Italian Sector Retention Rules + Schrems II + Transfer Impact Assessment →
Jamaica Data Protection Act 20201 control

Standard 8 per Section 27 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall not be transferred outside Jamaica unless adequate protection is provided.

JM-DPA2020-Standard8-Transfers-Outside-Jamaica-Sec27-Adequacy-Decisions-Standard-Contractual-Clauses-BCR-Derogations · Jamaica DPA 2020 Standard 8 - Transfers Outside Jamaica + Section 27 + Adequacy Decisions + Standard Contractual Clauses + Binding Corporate Rules + Derogations + Cross-Border Data Flows + Caribbean Community + International Data Privacy →
Jordan Draft Personal Data Protection Law (2022)1 control

Articles 20-21 of the Jordan PDPL govern cross-border transfers of personal data closely modelled on EU GDPR Chapter V. (1) Article 20 General Prohibition: Cross-border transfer prohibited unless one of these grounds applies (a) Adequacy Determination by Counc...

JO-PDPL-Cross-Border-Transfer-Article20-21-Adequacy-Consent-Public-Interest-Performance-Council-Approval · Jordan PDPL Cross-Border Transfer + Articles 20-21 + Adequacy + Consent + Public Interest + Performance + Council Approval + Standard Contractual Clauses + Binding Corporate Rules + Derogations + GCC Coordination →

Questions people ask about data privacy framework

What is Data Privacy Framework?
An international agreement that provides a mechanism for compliant cross-border transfers of personal data, replacing the previous Privacy Shield arrangement.
Why is Data Privacy Framework important for compliance?
Data Privacy Framework is a key concept in Privacy and Data Protection. Understanding data privacy framework helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Data Privacy Framework?
Data Privacy Framework appears in the requirement text of Greece Law 4624/2019 - Hellenic Data Protection Authority (HDPA) Implementation Act, Indiana Consumer Data Protection Act, Indonesia PDP Law, Italy Personal Data Protection Code (Legislative Decree No. 196/2003, amended 2018), Jamaica Data Protection Act 2020. Across these standards we have identified 7 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Data Privacy Framework?
Explore our compliance framework pages to see how data privacy framework applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Data Privacy Framework applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.