Commerce Seeks Renewal of EU Data Privacy Certifications
Published Date: 6/1/2026
Notice
Summary
The Department of Commerce is asking for approval to keep collecting self-certification info from U.S. companies that handle personal data from the EU, UK, and Switzerland. This helps make sure data privacy rules are followed while allowing smooth data flow across borders. About 4,575 companies will spend around 40 minutes each on this, with a total time cost of nearly 3,000 hours.
Analyzed Economic Effects
5 provisions identified: 1 benefits, 4 costs, 0 mixed.
Must Self-Certify To Rely On DPF
If your U.S. organization wants to rely on the EU-U.S., UK Extension, or Swiss-U.S. Data Privacy Frameworks for personal data transfers, it must self-certify its adherence to the Principles to the Department of Commerce and be placed on the Data Privacy Framework List. The information must be submitted via the DOC website by an authorized individual; the respondent's obligation is voluntary but required to rely on the Framework.
Participation Compliance Requirements
To participate, your organization must (a) be subject to investigatory/enforcement powers of the FTC, DOT, or other statutory body, (b) publicly declare commitment to the Principles, (c) publicly disclose privacy policies aligned with the Principles, and (d) fully implement those policies. Submissions must include the information specified in the Principles and an authorized individual must make the submission.
Annual Re‑certification and Removal Rules
Your organization must re-certify annually to remain on the Data Privacy Framework List; the DOC will remove organizations that voluntarily withdraw, fail to complete annual re-certification, or are found to persistently fail to comply. DOC will also require questionnaires and verifications for lapsed or withdrawing organizations.
Enforcement Exposure for Noncompliance
If your organization fails to comply with the Principles after self-certification, enforcement may be taken by the FTC under Section 5 of the FTC Act (15 U.S.C. 45), by the DOT under 49 U.S.C. 41712, or under other laws or regulations prohibiting unfair or deceptive acts. The DOC will maintain a public record of organizations removed from the Data Privacy Framework List and the reason for removal.
Annual Time Burden on U.S. Firms
If your company self-certifies under the Data Privacy Framework, the Department of Commerce expects 4,575 organizations to respond, with each response taking about 40 minutes and a total annual burden of 2,977 hours. The submission is filed via the DOC's Data Privacy Framework website and is estimated as an annual and periodic requirement.
Personalized for You
How does this regulation affect your finances?
Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Key Dates
Department and Agencies
Related Federal Register Documents
2025-05481, Regulations Enhancing the Administration of the Antidumping and Countervailing Duty Trade Remedy Laws; Correction
The Department of Commerce fixed some accidental mistakes in their trade rules that were published in December 2024. They put back important deadlines and details that were accidentally deleted and corrected a couple of typos. These fixes take effect on March 31, 2025, helping businesses and officials follow clear and accurate trade rules without confusion or delays.
2026-20777, Certain Paper Shopping Bags From Cambodia: Preliminary Results of Antidumping Duty Administrative Review; 2024-2025
The U.S. Department of Commerce found that some paper shopping bags from Cambodia were sold in the U.S. for less than their normal price between January 2024 and June 2025. This means certain Cambodian bag makers might have to pay extra duties to keep things fair. Businesses involved should watch for final decisions and possible changes in costs soon.
2026-20779, Passenger Vehicle and Light Truck Tires From Thailand: Preliminary Results and Rescission, in Part, of Antidumping Duty Administrative Review; 2024-2025
The U.S. Department of Commerce found that tires from Thailand were sold in the U.S. for less than their normal price between July 2024 and June 2025. This means some importers might have to pay extra duties to keep things fair. The review process had some delays due to government shutdowns, but now the preliminary results are out and open for comments.
2026-20778, Certain Hot-Rolled Steel Flat Products From the Republic of Korea: Final Results of Countervailing Duty Administrative Review; 2023
The U.S. Department of Commerce found that Hyundai Steel and POSCO from South Korea got unfair government help on their hot-rolled steel in 2023. Because of this, extra taxes (called countervailing duties) will apply to their steel imports starting October 9, 2026. This means U.S. steel buyers might pay a bit more, and Korean producers will have to adjust to these new rules.
2026-20690, Oleoresin Paprika From India: Antidumping Duty Order and Countervailing Duty Order
Starting October 8, 2026, the U.S. is putting extra taxes on oleoresin paprika imported from India because it's being sold too cheaply and getting unfair government help. This move protects American paprika producers from losing business and means importers will have to pay more when bringing in this spice. If you import or sell this paprika, get ready for new costs and rules!
2026-20691, Certain Paper Shopping Bags From Taiwan: Preliminary Results and Rescission, in Part, of Antidumping Duty Administrative Review; 2024-2025
The U.S. Department of Commerce reviewed paper shopping bags from Taiwan sold between January 2024 and June 2025. They found that Haur Tyi Paper Bag Co. didn’t sell these bags at unfairly low prices, and they stopped reviewing five other companies because no one asked for it. This means no extra duties for Haur Tyi right now, and the review process is moving forward with some deadlines adjusted due to a government shutdown.
Previous / Next Documents
Previous: 2026-10851, Agency Information Collection Activities; Submission to the Office of Management and Budget (OMB) for Review and Approval; Comment Request; Generic Clearance for Requests for Meetings and Registrations for Events and Conferences
The Department of Commerce is asking for public feedback on their plan to keep collecting info from people who want to meet with top officials or register for events and conferences. This is just a renewal—no changes or new costs—helping them keep things organized and smooth. Comments are open until July 31, 2026, so now’s the time to speak up if you have thoughts!
Next: 2026-10856, Endangered Species; Receipt of Recovery Permit Applications
The U.S. Fish and Wildlife Service got requests for special permits to study and help endangered animals and plants survive. They’re asking everyone—local groups, tribes, and the public—to share their thoughts by July 1, 2026, before deciding. This is a chance to support science that protects nature without any cost to you!