The Commission’s draft decision is based on the EU-US Data Privacy Protection Framework intended to replace Privacy Shield, which was declared invalid in conjunction with Schrems II in 2020. The new Data Privacy Framework originates from an Executive Order from the Biden administration aiming to solve the deficiencies of Privacy Shield. EDPB welcomes the improvements in the new draft regarding the right to rectification and the principles of necessity and proportionality. However, the EDPB expresses concerns related to the rights of data subjects, onwards transfers, and the practical functioning of the redress mechanism. EDPB Chair Andrea Jelinek concludes that the ”improvements brought to the U.S. legal framework are significant”, but that it is vital to “address the concerns expressed and to provide clarifications requested to ensure the adequacy decision will endure”.