On 3 September 2025, the General Court of the European Union (the GC) dismissed the action brought by Philippe Latombe, a member of the French Parliament and former member of the French Data Protection Authority, against the decision adopted by the European Commission (the Commission) recognising the adequacy of the EU-US Data Privacy Framework (the DPF). This decision is a major milestone as it confirms the validity of transfers of personal data from the European Union (the EU) to United States (US) organisations certified under the DPF. More broadly, it comes down to the scheme established in the US - which led to the Commission’s adequacy decision - receiving a clean bill of health.

Background

Chapter V of the General Data Protection Regulation (the GDPR) governs the transfers of pers

See Full Page