Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the International Transfers topic
No spam. Unsubscribe anytime.
CPPA staff recommends monitoring EU adequacy; board agrees to gather more info
Summary
Staff briefed the board that California already benefits from the EU–U.S. Data Privacy Framework and that pursuing a separate California–EU adequacy decision would be resource‑intensive and is uncertain given federal supremacy issues; the board asked staff to gather more detail from EU officials about gaps to inform future choices.
Deputy Director Maureen Mahoney and General Counsel Philip Laird presented a legal primer on EU adequacy decisions and how they facilitate cross‑border data flows.
Mahoney said the EU–U.S. Data Privacy Framework (the current federal adequacy arrangement) enables transfers for U.S. organizations that opt in and self‑certify and relies on an executive order and Department of Justice regulations to address prior court concerns about national‑security exceptions.
Laird explained key barriers to a California‑EU adequacy decision: federal supremacy limits California’s ability to constrain U.S. national‑security or law‑enforcement access to data, and CCPA’s scope (primarily for‑profit entities) differs from the GDPR’s coverage. Staff concluded that a standalone California adequacy decision would not add immediate legal benefit while the U.S.–EU decision is in force and would require significant cross‑government work if pursued.
Board members, led by Alastair Mactaggart, urged exploratory outreach to EU regulators to learn what specific legal gaps the EU would identify and whether a limited adequacy for California (e.g., for‑profit entities) might be feasible in practice. Chair Urban volunteered to seek additional information and staff agreed to pursue limited fact‑finding with European counterparts and to return with findings if appropriate.
What’s next: staff will monitor ongoing developments with the U.S.–EU framework, and, at the board’s direction, pursue preliminary information gathering with EU officials to determine whether a fuller effort to seek a California adequacy finding is warranted.
