EU General Court confirms United States ensured an adequate level of protection for EU personal data transfers to the US.

On 3 September 2025, the EU General Court delivered its judgment in Case T-553/23, Latombe v. Commission . The court dismissed Latombe’s action for annulment of the EU-US Data Privacy Framework (DPF) and upheld the European Commission’s Adequacy Decision (Adequacy Decision) in relation to the DPF, which allows businesses to freely transfer personal data subject to the EU GDPR to US organisations certified under the DPF. This ruling provides welcome additional certainty on trans-Atlantic data flows.

Overview

Although there were doubts as to whether Latombe’s annulment action would be considered admissible, not least because of the need for an applicant to have stand

See Full Page