ARTICLE 29 DATA PROTECTION WORKING PARTY

enforcement system at both Federal and state level, and the limited information included in
the adequacy decision.
The Privacy Shield is the first adequacy decision that has been drafted since the texts of the
GDPR were agreed in principle. Still, many of the improvements on the level of data
protection offered to individuals are not reflected in the Privacy Shield. The WP29 therefore
recommends that a review of this adequacy decision, as well as of the adequacy decisions
issued for other third countries, should take place shortly after the GDPR enters into
application.
A final recommendation of the WP29 to be highlighted here regards the joint review. The
WP29 welcomes the fact that the Privacy Shield adequacy decision will indeed be reviewed
on a yearly basis, with a broad involvement of DPAs and other relevant parties. It would
welcome agreement on the elements of the joint reviews, including on the drafting and
presentation of the review report by all parties well in advance of the first review.
58