Applications for Inclusion on the Lists of Arbitrators Under the Data Privacy Framework Program

The United States, the European Union (EU), the United Kingdom (UK), and Switzerland share a commitment to enhancing privacy protection, the rule of law, and a recognition of the importance of transatlantic data flows to our respective citizens, economies, and societies, but take different approaches to doing so. Given those differences, the DOC developed the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF in consultation with the European Commission, the UK Government, the Swiss Federal Administration, industry, and other stakeholders. These arrangements were respectively developed to provide U.S. organizations reliable mechanisms for personal data transfers to the United States from the European Union, the United Kingdom (and, as applicable, Gibraltar), and Switzerland while ensuring data protection that is consistent with EU, UK, and Swiss law. The DOC issued the EU-U.S. DPF Principles and the Swiss-U.S. DPF Principles, including the respective sets of Supplemental Principles (collectively the Principles) and Annex I of the Principles, as well as the UK Extension to the EU-U.S. DPF under its statutory authority to foster, promote, and develop international commerce (15 U.S.C. § 1512). ITA administers and supervises the Data Privacy Framework program, including by maintaining and making publicly available the Data Privacy Framework List, an authoritative list of U.S. organizations that have self-certified to the DOC and declared their commitment to adhere to the Principles pursuant to the EU-U.S. DPF and, as applicable, the UK Extension to the EU-U.S. DPF, and/or the Swiss-U.S. DPF. Such organizations must respond promptly to inquiries and requests from ITA for information relating to their adherence to the Principles. On the basis of the Principles, Executive Order 14086, 28 CFR part 201, and accompanying letters and materials, including ITA’s commitments regarding the administration and supervision of the Data Privacy Framework program, the European Commission, the UK Government, and the Swiss Federal Administration have respectively recognized the adequacy of the protection provided by the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF1, and the Swiss-U.S. DPF thereby enabling personal data transfers from each respective jurisdiction to U.S. organizations participating in the relevant part of the Data Privacy Framework program. The DOC previously requested and obtained approval of analogous information collections that allowed the DOC, as represented by ITA, to collect information from applicants for inclusion on the EU-U.S. Privacy Shield List of Arbitrators (OMB Control No. 0625-0277) and from applicants for inclusion on the Swiss-U.S. Privacy Shield List of Arbitrators (OMB Control No. 0625-0278). Pursuant to the EU-U.S. DPF, the EU-U.S. Privacy Shield Framework Principles were amended as the “EU-U.S. Data Privacy Framework Principles”; and pursuant to the Swiss-U.S. DPF, the Swiss-U.S. Privacy Shield Framework Principles will be amended as the “Swiss-U.S. Data Privacy Framework Principles”. Organizations that self-certified their commitment to comply with the EU-U.S. Privacy Shield Framework Principles and/or the Swiss-U.S. Privacy Shield Framework Principles that wish to enjoy the benefits of participating in the EU-U.S. DPF and/or the Swiss-U.S. DPF (as applicable) must comply with the amended Principles. More information on the binding arbitration option under the Data Privacy Framework program will is available on the DOC’s Data Privacy Framework program website (https://www.dataprivacyframework.gov/).

The latest form for Applications for Inclusion on the Lists of Arbitrators Under the Data Privacy Framework Program expires 2029-10-31 and is listed under ICR 202605-0625-005.

View the official OMB control history on Reginfo.gov.

Application for Inclusion on the EU-U.S. DPF List of Arbitrators

Federal Enterprise Architecture: International Affairs and Commerce - Global Trade