<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2023/1795 — Decision — Adequate protection under the EU-US Data Privacy Framework [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework/articles/1","url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework/articles/1","title":"Article 1","family":"l2_unit_view","work_id":"spaces/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework","view_of":"/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"Commission Implementing Decision (EU) 2023/1795, OJ L 231, 20.9.2023","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/dec_impl/2023/1795/oj/eng","valid_from":"2023-07-10","valid_until":null,"content_id":"40436ed53d902074","versions":["2023-07-10"],"version_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework/articles/1/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework/articles/1/versions/2026-10-26/rev/40436ed53d902074","versions_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework/articles/1/versions","relations_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework/articles/1/relations","act_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework#art-1","source_line":"Commission Implementing Decision (EU) 2023/1795 · binding on its addressees · dated 10 Jul 2023 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"implementing_decision","legal_nature":"binding_adopted","addressees":["the Member States"],"dates":{"document_date":"2023-07-10","entry_into_force":"2023-07-10","locators":{"document_date":"CELLAR 32023D1795 work_date_document","entry_into_force":"CELLAR 32023D1795 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework","path":"/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework","name":"Commission Implementing Decision (EU) 2023/1795","number":"2016/679","celex":"32023D1795","title_official":"COMMISSION IMPLEMENTING DECISION EU 2023/1795 of 10 July 2023 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data under the EU-US Data Privacy Framework (notified under document C(2023)4745) (Text with EEA relevance)","document_date":"2023-07-10"},"position":{"kind":"article","key":"1","index":1,"articles":4,"annexes":8},"prev":null,"next":{"path":"/gdpr/level-2/implementing-acts/2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework/articles/2","key":"2","title":"Article 2"},"act_anchor":"#art-1"}}} -->
# Article 1

**Commission Implementing Decision (EU) 2023/1795 · binding on its addressees · dated 10 Jul 2023 [in force]**

*In force · Commission Implementing Decision (EU) 2023/1795, OJ L 231, 20.9.2023 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/dec_impl/2023/1795/oj/eng)*

For the purpose of Article 45 of Regulation (EU) 2016/679, the United States ensures an adequate level of protection for personal data transferred from the Union to organisations in the United States that are included in the ‘Data Privacy Framework List’, maintained and made publicly available by the U.S. Department of Commerce, in accordance with Section I.3 of Annex I.
