Is California on its way to going for ‘adequacy?’
EU cross-border transfers of personal data are highly regulated. Existing restrictions are designed to ensure that the level of protection of personal data is not undermined by exporting data.
A heavy compliance burden is imposed on U.S. entities that import EU personal data because the U.S. regulatory data protection framework differs from the EU framework in ways that, from an EU perspective, undermine the effective protection of EU data if exported.