A new deal on EU-US data flows has been agreed. But concerns persist about government surveillance, and companies face further uncertainty.

A new deal on data transfers between the EU and US has alarmed businesses and privacy campaigners.

The pact, known as the EU-US Data Privacy Framework, was announced on Monday by the European Commission. The EU’s executive body concluded that the US offered an “adequate level of protection” for data transfers under the new arrangements.

The framework replaces the Privacy Shield, which the EU’s top court had struck down in July 2020 over concerns that the US didn’t provide sufficient protection against government surveillance.