What happened: The EU’s General Court dismissed a challenge to the EU–US Data Privacy Framework, upholding the Commission’s adequacy decision and stabilizing transatlantic data transfers—for now.
Why it matters
Companies get legal cover to keep data moving across the Atlantic, but an appeal to the EU’s top court is possible. Firms should keep standard contractual clauses and minimization practices sharp.
By the numbers / context
- Case: T‑553/23 (Latombe v. Commission); ruling on Sept. 3, 2025.
- Pillars: U.S. oversight and the Data Protection Review Court.
- Risk: potential further litigation that could reopen uncertainty.
What to watch
Vendor recertifications under the framework; any appeal timeline; and guidance from DPAs on supplemental measures.