EU-US Data Privacy Framework
Self-Certification

The DPF is a new data transfer mechanism between the EU and the US that allows US companies to self-certify that they are compliant with certain privacy principles and can lawfully receive personal data from the EU.

Self-certification is optional, however more and more companies are choosing to self-certify for several reasons. Self-certified companies can demonstrate their compliance with GDPR regulations, and provide a more efficient means for data transfers (SCCs aren’t required under the DPF rules). Additionally, for B2B companies targeting enterprise clients, the self-certification shows that data privacy is a top priority, helping build trust with potential and existing customers.

The self-certification process involves submitting an online application and self-declaring compliance with the DPF principles. There is no prior review or verification by authorities, which is why Legal Nodes offers DPF self-certification support so that companies can progress through the DPF certification journey as smoothly as possible. Speak to us to learn more.

No, DPF-certified companies can use the DPF mechanism as their sole mechanism for EU-US data transfers, meaning the DPF provides a method that is more efficient, requires less paperwork, and ensures compliance.

There are several costs that go into DPF self-certification, and companies should be mindful that re-certification each year could see costs increase if a company’s circumstances change.

Costs include:

• Arbitration fees (variable)
• IRM (Independent Recourse Mechanism) fees (variable) or EU DPA panel fee (fixed)
• DPF certification processing fee (variable)
• Service provider fees (variable)

Variable costs change depending on both the company’s revenue and the type of verification a company is seeking to achieve. For example, if a small company only wants to be certified under the EU-US program, this would cost less compared to a larger company seeking certification under the EU, the UK, and the Swiss program

Service provider fees also vary depending on which service provider you choose. As many of the fees listed above change on a case-by-case basis, we encourage you to talk to our team so that we can give you an accurate and competitive cost estimation for your DPF self-certification.