Blog | 10 March 2025
Uncertain future for personal data in the US
Concerns about the transfer of personal data to the US are growing. IMY stresses that the adequacy decision still applies, but that businesses and organisations should be prepared for what a possible repeal could mean. What does it mean in practice – and how can you prepare?
The transfer of personal data from the EU to the US has long been a hot topic, and now it has become even more topical. The Danish and Norwegian Data Protection Agencies have recently recommended that all businesses develop an exit strategy from US cloud services. The reason? The US has dismantled a key part of its data protection oversight system – the Privacy and Civil Liberties Oversight Board (PCLOB). This could affect the EU's decision that the US meets an adequate level of protection for transatlantic data transfers.
How are businesses and organisations affected?
On March 5, the Swedish Data Protection Authority (IMY External link, opens in new window. ) commented on the situation. They stress that the adequacy decision is still valid, but that businesses and organisations should be prepared for what a possible repeal would mean.
In Norway and Denmark, the IMY's counterpart, the Danish Data Protection Agency, has gone a step further and is actively recommending that businesses develop an exit strategy from US cloud services. This may involve starting to look at other options for storing and managing personal data.
What can you do now?
Although there is no decision yet to change the adequacy level for the US, it is clear that the situation is uncertain. If your company or organisation handles personal data and uses US cloud services, it may be wise to
- Follow developments closely and keep abreast of EU and IMY decisions.
- Map where the data is stored and consider alternative solutions in the EU if possible.
- Prepare a strategy to adapt quickly if the regulatory framework changes.
The uncertainty around data transfers to the US is far from over. We receive questions from customers regarding this and at Sitevision we follow the course of events closely.