European Data Protection Board Extends Europrivacy Certification Worldwide
The European Data Protection Board has approved two measures to simplify international data transfers while strengthening personal data protection. The decisions were announced in a press release on April 20, 2026.
The first decision extends the use of the Europrivacy certification, the European Data Protection Seal under the General Data Protection Regulation (GDPR), to countries outside the European Economic Area. Companies subject to the GDPR worldwide can now use this certification to demonstrate compliance in their data processing activities.
The second decision approves a specific version of the Europrivacy criteria as a mechanism for international data transfers under Article 46 of the GDPR. This allows data importers outside the EEA to show adherence to GDPR requirements when binding commitments are in place.
According to the announcement, the changes aim to provide a more practical way for organizations to verify compliance, reduce related costs, and strengthen trust in cross-border data flows. The Europrivacy framework will also align with Interprivacy, an international data protection certification system approved for global use.
We hope you enjoyed this article.
Consider subscribing to one of our newsletters like AI Policy Brief or Daily AI Brief.
Also, consider following us on social media:
More from: Regulation
Subscribe to AI Policy Brief
Weekly report on AI regulations, safety standards, government policies, and compliance requirements worldwide.
Market report
2025 State of Data Security Report: Quantifying AI’s Impact on Data Risk
The 2025 State of Data Security Report by Varonis analyzes the impact of AI on data security across 1,000 IT environments. It highlights critical vulnerabilities such as exposed sensitive cloud data, ghost users, and unsanctioned AI applications. The report emphasizes the need for robust data governance and security measures to mitigate AI-related risks.
Read more