On 23 October 2019 the European Commission published its report on the third annual review of the EU-U.S. Privacy Shield. It confirms that the U.S. continues to ensure an adequate level of protection for personal data transferred from the EU to participating companies in the U.S. About 5,000 companies are currently participating therein.
The report notes that enforcement action and systematic oversight improved, besides the appointment of the permanent Ombudsperson and filling of the final two vacancies on the Privacy and Civil Liberties Oversight Board. Still, the report criticizes the time of the (re)certification process for companies who want to participate, too few compliance checks and insufficient guidance on HR data.