On Wednesday 3 September 2025, the European Union General Court upheld the EU-US Data Privacy Framework (DPF), dismissing a legal challenge brought by French lawmaker Philippe Latombe.
In effect since 2023, the DPF was established to create a framework for transferring personal data between the EU and the United States. Latombe had argued that it did not fully respect data protection rules and fell short of EU protection standards.
What can you do?
Whilst the ruling provides immediate reassurance for businesses, continued vigilance remains essential. This was the third attempt to challenge the EU-US Data Privacy Framework, and further legal challenges are anticipated.
Simple steps you can take to support your organisation are:
- Review current data transfer arrangements
- Assess risks associated with data transfer
- Contact our team of friendly DPO’s to help you review your data agreements
Taking these steps will help safeguard your data transfers and ensure compliance, even if the legal landscape continues to evolve.
For more information on iSTORM’s DPO services please contact us directly – info@istormsolutions.co.uk or call 01789 608708
