Framework Intact, For Now: EU-US Data Flows Dodge Another Bullet

On September 3, 2025, the General Court of the European Union dismissed Philippe Latombe’s annulment action against the Commission’s adequacy decision for the EU-US Data Privacy Framework (DPF) and confirmed that, at the time of adoption, the United States (US) ensured an adequate level of protection for European Union (EU) personal data transferred to DPF-certified organizations. The Court also underscored that U.S. signals-intelligence activities are subject to ex-post judicial oversight by…
By: King & Spalding