The Data Privacy Framework (DPF) Program, overseen by the U.S. Department of Commerce’s International Trade Administration (ITA), allows eligible U.S.-based organizations to self-certify their compliance with data privacy standards under the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and/or the Swiss-U.S. DPF. Participation in the program is voluntary, but once an organization self-certifies, compliance with the DPF Principles becomes legally enforceable under U.S. law. Organizations must self-certify through the DPF program website, publicly committing to adhere to these principles. The ITA maintains the DPF List, which includes organizations that have completed their initial certification and annual re-certification. This list is updated regularly to reflect organizations that voluntarily withdraw, fail to re-certify, or are found to be in persistent non-compliance. Additionally, the ITA keeps a public record of all organizations removed from the DPF List, along with the reasons for removal. This authoritative list remains publicly accessible via the DPF website. The DPF program is designed to facilitate transatlantic data transfers by ensuring that U.S. organizations maintain appropriate privacy protections in line with international expectations and regulatory requirements, supporting trust in cross-border data exchanges
About this Dataset
| Title | Data Privacy Framework (DPF) Program |
|---|---|
| Description | The Data Privacy Framework (DPF) Program, overseen by the U.S. Department of Commerce’s International Trade Administration (ITA), allows eligible U.S.-based organizations to self-certify their compliance with data privacy standards under the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and/or the Swiss-U.S. DPF. Participation in the program is voluntary, but once an organization self-certifies, compliance with the DPF Principles becomes legally enforceable under U.S. law. Organizations must self-certify through the DPF program website, publicly committing to adhere to these principles. The ITA maintains the DPF List, which includes organizations that have completed their initial certification and annual re-certification. This list is updated regularly to reflect organizations that voluntarily withdraw, fail to re-certify, or are found to be in persistent non-compliance. Additionally, the ITA keeps a public record of all organizations removed from the DPF List, along with the reasons for removal. This authoritative list remains publicly accessible via the DPF website. The DPF program is designed to facilitate transatlantic data transfers by ensuring that U.S. organizations maintain appropriate privacy protections in line with international expectations and regulatory requirements, supporting trust in cross-border data exchanges |
| Modified | 2026-09-03 |
| Publisher Name | International Trade Administration |
| Contact | mailto:[email protected] |
| Keywords | data privacy framework , EU-U.S. DPF , Swiss-U.S. DPF , data privacy standards |
{
"identifier": "https:\/\/api.trade.gov\/data\/id\/ITA-0084",
"accessLevel": "non-public",
"contactPoint": {
"@type": "vcard:Contact",
"fn": "[email protected]",
"hasEmail": "mailto:[email protected]"
},
"programCode": [
"006:003"
],
"landingPage": "",
"title": "Data Privacy Framework (DPF) Program",
"description": "The Data Privacy Framework (DPF) Program, overseen by the U.S. Department of Commerce\u2019s International Trade Administration (ITA), allows eligible U.S.-based organizations to self-certify their compliance with data privacy standards under the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and\/or the Swiss-U.S. DPF. Participation in the program is voluntary, but once an organization self-certifies, compliance with the DPF Principles becomes legally enforceable under U.S. law. Organizations must self-certify through the DPF program website, publicly committing to adhere to these principles. The ITA maintains the DPF List, which includes organizations that have completed their initial certification and annual re-certification. This list is updated regularly to reflect organizations that voluntarily withdraw, fail to re-certify, or are found to be in persistent non-compliance. Additionally, the ITA keeps a public record of all organizations removed from the DPF List, along with the reasons for removal. This authoritative list remains publicly accessible via the DPF website. The DPF program is designed to facilitate transatlantic data transfers by ensuring that U.S. organizations maintain appropriate privacy protections in line with international expectations and regulatory requirements, supporting trust in cross-border data exchanges",
"language": [
"us-EN"
],
"distribution": "",
"bureauCode": [
"006:025"
],
"modified": "2026-09-03",
"publisher": {
"@type": "org:Organization",
"name": "International Trade Administration",
"subOrganizationOf": {
"@type": "org:Organization",
"name": "U.S. Department of Commerce"
}
},
"theme": "",
"keyword": [
"data privacy framework",
"EU-U.S. DPF",
"Swiss-U.S. DPF",
"data privacy standards"
]
}
