Summary: Europe’s General Court upheld the EU–US Data Privacy Framework, stabilizing transatlantic data transfers—though campaigners may appeal to the Court of Justice.
Why it matters
Companies can continue transfers under the DPF while maintaining SCCs and minimization as fallback. U.S. redress mechanisms and oversight remain the legal fulcrum for any future challenge.
Key facts
- Court: General Court ruling (Sept 3, 2025)
- Mechanism: U.S. Data Protection Review Court + safeguards
- Risk: further litigation could still narrow scope
What to watch
Any appeal deadlines and filings; data protection authorities’ guidance on supplemental measures; vendor recertifications.