<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2023/1795 — Decision — Adequate protection under the EU-US Data Privacy Framework [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework/annexes/annex-viii","url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework/annexes/annex-viii","title":"ANNEX VIII","family":"l2_unit_view","work_id":"spaces/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework","view_of":"/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Commission Implementing Decision (EU) 2023/1795, OJ L 231, 20.9.2023","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/dec_impl/2023/1795/oj/eng","valid_from":"2023-07-10","valid_until":null,"content_id":"592cc616904e8a3a","versions":["2023-07-10"],"version_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework/annexes/annex-viii/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework/annexes/annex-viii/versions/2026-10-26/rev/592cc616904e8a3a","versions_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework/annexes/annex-viii/versions","relations_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework/annexes/annex-viii/relations","act_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework#annex-viii","source_line":"Commission Implementing Decision (EU) 2023/1795 · binding on its addressees · dated 10 Jul 2023 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"implementing_decision","legal_nature":"binding_adopted","addressees":["the Member States"],"dates":{"document_date":"2023-07-10","entry_into_force":"2023-07-10","locators":{"document_date":"CELLAR 32023D1795 work_date_document","entry_into_force":"CELLAR 32023D1795 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework","path":"/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework","name":"Commission Implementing Decision (EU) 2023/1795","number":"2016/679","celex":"32023D1795","title_official":"COMMISSION IMPLEMENTING DECISION EU 2023/1795 of 10 July 2023 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data under the EU-US Data Privacy Framework (notified under document C(2023)4745) (Text with EEA relevance)","document_date":"2023-07-10"},"position":{"kind":"annex","key":"annex-viii","index":8,"articles":4,"annexes":8},"prev":{"path":"/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework/annexes/annex-vii","key":"annex-vii","title":"ANNEX VII"},"next":null,"act_anchor":"#annex-viii"}}} -->
# ANNEX VIII

**Commission Implementing Decision (EU) 2023/1795 · binding on its addressees · dated 10 Jul 2023 [in force]**

*In force · Commission Implementing Decision (EU) 2023/1795, OJ L 231, 20.9.2023 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/dec_impl/2023/1795/oj/eng)*

<a id="annex-viii"></a>List of abbreviations

The following abbreviations appear in this Decision:

<!-- table: t05 -->
<table>
<tbody>
<tr><td>AAA</td><td>American Arbitration Association</td></tr>
<tr><td>AG Regulation</td><td>Attorney General Regulation on the Data Protection Review Court</td></tr>
<tr><td>AGG-DOM</td><td>Attorney General Guidelines for Domestic FBI Operations</td></tr>
<tr><td>APA</td><td>Administrative Procedure Act</td></tr>
<tr><td>CIA</td><td>Central Intelligence Agency</td></tr>
<tr><td>CNSS</td><td>Committee on National Security Systems</td></tr>
<tr><td>Court of Justice</td><td>Court of Justice of the European Union</td></tr>
<tr><td>Decision</td><td>Commission Implementing Decision pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data under the EU-US Data Privacy Framework</td></tr>
<tr><td>DHS</td><td>Department of Homeland Security</td></tr>
<tr><td>DNI</td><td>Director of National Intelligence</td></tr>
<tr><td>DoC</td><td>U.S. Department of Commerce</td></tr>
<tr><td>DoJ</td><td>U.S. Department of Justice</td></tr>
<tr><td>DoT</td><td>U.S. Department of Transportation</td></tr>
<tr><td>DPA</td><td>Data Protection Authority</td></tr>
<tr><td>DPF List</td><td>Data Privacy Framework List</td></tr>
<tr><td>DPRC</td><td>Data Protection Review Court</td></tr>
<tr><td>ECOA</td><td>Equal Credit Opportunity Act</td></tr>
<tr><td>ECPA</td><td>Electronic Communications Privacy Act</td></tr>
<tr><td>EEA</td><td>European Economic Area</td></tr>
<tr><td>EO 12333</td><td>Executive Order 12333 ‘United States Intelligence Activities’</td></tr>
<tr><td>EO 14086, the EO</td><td>Executive Order 14086 ‘Enhancing Safeguards for US Signals Intelligence Activities’</td></tr>
<tr><td>EU-U.S. DPF or DPF</td><td>EU-U.S. Data Privacy Framework</td></tr>
<tr><td>EU-U.S. DPF Panel</td><td>EU-U.S. Data Privacy Framework Panel</td></tr>
<tr><td>FBI</td><td>Federal Bureau of Investigation</td></tr>
<tr><td>FCRA</td><td>Fair Credit Reporting Act</td></tr>
<tr><td>FISA</td><td>Foreign Intelligence Surveillance Act</td></tr>
<tr><td>FISC</td><td>Foreign Intelligence Surveillance Court</td></tr>
<tr><td>FISCR</td><td>Foreign Intelligence Surveillance Court of Review</td></tr>
<tr><td>FOIA</td><td>Freedom of Information Act</td></tr>
<tr><td>FRA</td><td>Federal Records Act</td></tr>
<tr><td>FTC</td><td>U.S. Federal Trade Commission</td></tr>
<tr><td>HIPAA</td><td>Health Insurance Portability and Accountability Act</td></tr>
<tr><td>ICDR</td><td>International Centre for Dispute Resolution</td></tr>
<tr><td>IOB</td><td>Intelligence Oversight Board</td></tr>
<tr><td>NIST</td><td>National Institute of Standards and Technology</td></tr>
<tr><td>NSA</td><td>National Security Agency</td></tr>
<tr><td>NSL</td><td>National Security Letter(s)</td></tr>
<tr><td>ODNI</td><td>Office of the Director of National Intelligence</td></tr>
<tr><td>ODNI CLPO, CLPO</td><td>Civil Liberties Protection Officer of the Director of National Intelligence</td></tr>
<tr><td>OMB</td><td>Office of Management and Budget</td></tr>
<tr><td>OPCL</td><td>Office of Privacy and Civil Liberties of the Department of Justice</td></tr>
<tr><td>PCLOB</td><td>Privacy and Civil Liberties Oversight Board</td></tr>
<tr><td>PIAB</td><td>President’s Intelligence Advisory Board</td></tr>
<tr><td>PPD 28</td><td>Presidential Policy Directive 28</td></tr>
<tr><td>Regulation (EU) 2016/679</td><td>Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC</td></tr>
<tr><td>SAOP</td><td>Senior Agency Official for Privacy</td></tr>
<tr><td>The Principles</td><td>EU-U.S. Data Privacy Framework Principles</td></tr>
<tr><td>U.S.</td><td>United States</td></tr>
<tr><td>Union</td><td>European Union</td></tr>
</tbody>
</table>
<!-- /table -->
