{
  "url": "https://openlegislation.uk/eu-decision-2016-1250/annex-IV/appendix-Attachment",
  "json_url": "https://openlegislation.uk/eu-decision-2016-1250/annex-IV/appendix-Attachment.json",
  "legislation": "eudn/2016/1250",
  "legislation_title": "Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-U.S. Privacy Shield (notified under document C(2016) 4176) (Text with EEA relevance) (revoked)",
  "legislation_url": "https://openlegislation.uk/eu-decision-2016-1250",
  "path": "annex/IV/appendix/Attachment",
  "kind": "appendix",
  "number": "Attachment A",
  "heading": "The EU-U.S. Privacy Shield Framework in Context: An Overview of the U.S. Privacy and Security Landscape",
  "text": "The protections provided by the EU-U.S. Privacy Shield Framework (the ‘Framework’) exist in the context of the broader privacy protections afforded under the U.S. legal system as a whole. First, the U.S. Federal Trade Commission (‘FTC’) has a robust privacy and data security program for U.S. commercial practices that protects consumers worldwide. Second, the landscape of consumer privacy and security protection in the United States has evolved substantially since 2000 when the original U.S.-EU Safe Harbor program was adopted. Since that time, many federal and state privacy and security laws have been enacted, and public and private litigation to enforce privacy rights has increased significantly. The broad scope of U.S. legal protections for consumer privacy and security applicable to commercial data practices complements the protections provided to EU individuals by the new Framework.\nI.\nTHE FTC'S GENERAL PRIVACY AND SECURITY ENFORCEMENT PROGRAM\n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .\nII.\nFEDERAL AND STATE PROTECTIONS FOR CONSUMER PRIVACY\n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .",
  "extent": "E+W+S+N.I.",
  "status": "repealed",
  "version": "current",
  "annotations": [
    {
      "type": "F",
      "label": "F1",
      "text": "Decision revoked (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), Sch. 3 para. 1(o); 2020 c. 1, Sch. 5 para. 1(1)"
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2016/1250/annex/IV/appendix/Attachment",
    "retrieved_at": "2026-11-01T15:13:53.293736+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}