Data Privacy Framework

Check Point Software Technologies, Inc., participates in the EU-U.S. Data Privacy Framework. Under the Data Privacy Framework, certified US based organizations can legally receive personal data transferred from the EU / EEA.

Check Point’s participation in the Data Privacy Framework highlights our commitment to data protection and the smooth transfer of data across the United States, the European Union, European Economic Area, the United Kingdom, and Switzerland.

What is the EU-U.S. Data Privacy Framework?

The EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework were developed to facilitate transatlantic commerce by providing U.S. organizations with reliable mechanisms for personal data transfers to the United States from the EU, UK, and Switzerland that are consistent with EU, UK, and Swiss law.

The main objective of the Data Privacy Framework is to facilitate trans-Atlantic data flows while considering the concerns highlighted by the Court of Justice of the European Union (CJEU) in its Schrems II decision of July 2020.

The DPF program enables eligible U.S. based organizations to self-certify their compliance pursuant to the Data Privacy Framework’s principles. Check Point Software Technologies Inc. (and its subsidiaries) certified their compliance with the framework’s principles.

Under the EU-U.S. Data Privacy Framework, certified organizations can begin receiving personal data from the EU / EEA based on the framework starting July 10, 2023. This date marks the implementation of the European Commission’s adequacy decision for the EU-U.S. DPF, activating the EU-U.S. DPF Principles, which include the Supplemental Principles and Annex I. This decision facilitates the legal transfer of EU personal data to certified organizations.

Similarly, certified organizations under the UK Extension to the EU-U.S. Data Privacy Framework are authorized to receive personal data from the UK and Gibraltar from October 12, 2023, the effective date of the adequacy regulations for the UK Extension. This extension establishes a data bridge that allows for the lawful transfer of personal data from the UK and Gibraltar to certified organizations, adhering to UK regulations.

Organizations participating in the Swiss-U.S. DPF may receive personal data from Switzerland in reliance on the Swiss-U.S. DPF effective September 15, 2024, which is the date of entry into force of Switzerland’s recognition of adequacy for the Swiss-U.S. DPF. While July 17, 2023 was the effective date of the Swiss-U.S. DPF Principles, including the Supplemental Principles and Annex I of the Principles, personal data could not have been received from Switzerland in reliance on the Swiss-U.S. DPF until the date of entry into force of Switzerland’s recognition of adequacy for the Swiss-U.S. DPF. The recognition of adequacy enables the transfer of Swiss personal data to participating organizations consistent with Swiss law.

What commitments are encompassed within this framework by the U.S. government?

• Enhanced privacy and civil liberties protections in signals intelligence gathering.

• A new two-level redress mechanism allowing EU citizens to seek recourse if they are subjected to unauthorized data collection by U.S. signals intelligence.

• An independent Data Protection Review Court, staffed by non-U.S. government individuals, empowered to hear claims and enforce remedies as required.

• Procedures adopted by U.S. intelligence agencies to ensure rigorous oversight of new privacy and civil liberties protections.

What does this mean for Check Point and our customers?

Our commitment to the privacy and security of our customers and partners is unwavering. Our adherence to the Data Privacy Framework reinforces our commitment to:

• Secure Data Transfers: We ensure the highest security in data transfers between the EU and the U.S., in accordance with Data Privacy Framework principles.

• Privacy by Design: Check Point integrates privacy principles into our products and services from the outset, ensuring your data receives the utmost respect and protection.

• Rigorous Compliance: We are committed to providing our customers with the tools and services they need to remain compliant with applicable data privacy regulations.

For further details on how Check Point can support your data privacy efforts, please visit our Trust Point.