The EU General Court delivered its much anticipated ruling on a challenge brought by a French politician against the EU-US Data Privacy Framework ( DPF ) on 3 September 2025. The DPF is the EU Commission’s third try to establish a valid mechanism to facilitate the transfer of personal data subject to the EU’s GDPR to recipients in the US. The EU General Court upheld the EU-US Data Privacy Framework for now – however, the decision is subject to review by the Court of Justice of the EU ( CJEU ) and may lead to further scrutiny in the future. This blog post gives an overview of the EU General Court’s ruling and of the implications for EU, US and UK businesses that may rely, or be thinking of relying, on the DPF.

You can read our previous blog posts for further background on the

See Full Page