Data Privacy Framework Explained: Myth vs Reality
October 14, 2026
How well do you know the EU-U.S. Data Privacy Framework (DPF)? In this episode, privacy leaders put common assumptions to the test, answering each question with “myth or reality?” before explaining what organizations need to know about the DPF and international data transfers.
Is the DPF a substitute for GDPR? Does certification eliminate the need for Standard Contractual Clauses? Is the framework only useful for large companies? Myth or reality? The discussion separates fact from misconception while exploring DPF self-certification through the Department of Commerce, annual recertification, independent recourse mechanisms, privacy policy requirements, and the role of BBB National Programs.
The episode also tackles myths surrounding controllers, processors and subprocessors, data subject rights, onward transfers, vendor contracts, and security safeguards. Finally, the experts examine independent verification and how a DPF Verified seal can help organizations demonstrate that their published privacy commitments align with their actual policies and procedures.
Speakers
RESOURCES
Data Privacy Framework Certification & Verification
Department of Commerce DPF.gov
How well do you know the EU-U.S. Data Privacy Framework (DPF)? In this episode, privacy leaders put common assumptions to the test, answering each question with “myth or reality?” before explaining what organizations need to know about the DPF and international data transfers.
Is the DPF a substitute for GDPR? Does certification eliminate the need for Standard Contractual Clauses? Is the framework only useful for large companies? Myth or reality? The discussion separates fact from misconception while exploring DPF self-certification through the Department of Commerce, annual recertification, independent recourse mechanisms, privacy policy requirements, and the role of BBB National Programs.
The episode also tackles myths surrounding controllers, processors and subprocessors, data subject rights, onward transfers, vendor contracts, and security safeguards. Finally, the experts examine independent verification and how a DPF Verified seal can help organizations demonstrate that their published privacy commitments align with their actual policies and procedures.
Speakers
- Divya Sridhar, Ph.D., Vice President, Global Privacy Division and Privacy Initiatives Operations, BBB National Programs
- Rochelle Osei-Tutu, CIPM, CIPP/E, Deputy Director, Privacy Operations, BBB National Programs
RESOURCES
Data Privacy Framework Certification & Verification
Department of Commerce DPF.gov