---
title: "Build a cross-border transfer mechanism table"
url: "https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-cross-border-transfer-mechanism-table/united-states"
type: "task_jurisdiction_version"
site: "AI Law Framework"
id: "A25-T1-R10-US"
practice_area: "Privacy, Data Protection & Cyber"
tier: "yellow"
lawyer_review: "required"
jurisdictions: ["US"]
last_reviewed: "2026-10-22"
---

# Build a cross-border transfer mechanism table

> Make a table of the transfer direction, the countries named in the instructions, and the mechanism the instructions already identify. Add no mechanism the sources do not support.

Canonical page: https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-cross-border-transfer-mechanism-table/united-states  
Last reviewed: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Privacy, Data Protection & Cyber](https://ailawframework.com/practice/privacy-data-protection-and-cyber.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | Make a table of the transfer direction, the countries named in the instructions, and the mechanism the instructions already identify. Add no mechanism the sources do not support. |
| What the lawyer must review | The Department of Commerce Data Privacy Framework site states that the EU-US Data Privacy Framework, the UK Extension, and the Swiss-US Data Privacy Framework give US organisations mechanisms for personal-data transfers to the United States from the European Union, the United Kingdom and Switzerland. That is not a general US ban on sending data out of the United States, and it is not an equivalent of a single statutory transfer rule. Confirm the organisation is on the Framework list before you record the Framework as the mechanism, and open the state privacy statute if the data are also subject to it. Model Rule 1.6 and Opinion 512: client transfer facts are confidential, and a public tool is the wrong place for them unless the client has agreed and the tool's terms hold. |
| Written for | United States |
| Applies to | [Build a cross-border transfer mechanism table](https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-cross-border-transfer-mechanism-table.md) |

## Checking plan

- What the AI does: Make a table of the transfer direction, the countries named in the instructions, and the mechanism the instructions already identify. Add no mechanism the sources do not support.
- Basis: Checked against the linked sources on 22 October 2026. Confirm the current instrument before reliance.

## Notes

- The Framework covers transfers to the United States from the EU, the UK and Switzerland. Do not use it for a different route.
- Do not invent standard contractual clauses or an adequacy decision you have not opened.

## Sources

- [US Department of Commerce: Data Privacy Framework](https://www.dataprivacyframework.gov/) (checked 2026-10-22)
- [ABA Model Rule 1.6, Confidentiality of Information](https://www.americanbar.org/groups/professional_responsibility/publications/model_rules_of_professional_conduct/rule_1_6_confidentiality_of_information/) (checked 2026-10-22)
- [ABA Formal Opinion 512, Generative Artificial Intelligence Tools (29 July 2024)](https://www.americanbar.org/content/dam/aba/administrative/professional_responsibility/ethics-opinions/aba-formal-opinion-512.pdf) (checked 2026-10-22)

## Forms and precedents for this task

| Form or precedent | Kind | AI level | Summary |
| --- | --- | --- | --- |
| [Cross-border disclosure of personal information under APP 8](https://ailawframework.com/precedents/privacy-data-protection-and-cyber/app-8-cross-border-disclosure.md) | Checklist | Yellow | Checklist, from the OAIC APP 8 chapter, of when a disclosure to an overseas recipient requires reasonable steps and when section 16C accountability applies. |

Signed-in accounts can read the full text of each one.

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*