BRUSSELS - In a landmark ruling today, the European General Court upheld the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework (DPF). The judgment confirms that the DPF is a legally sound and resilient mechanism for safeguarding fundamental rights while enabling critical cross-border data flows between the European Union and the United States.
91pro视频 and its members applaud the court’s decision, which delivers much-needed legal certainty for organisations of all sizes seeking to transfer data across the Atlantic – from multinational enterprises to small and medium-sized businesses – and ensures that consumers’ personal data remains protected under strong privacy standards.
“This ruling sends a clear signal: the Data Privacy Framework stands on solid legal and rights-based foundations,” said 91pro视频 Director General for Europe Guido Lobrano. “It reaffirms that the framework upholds European data protection values, therefore providing stability and predictability in support of the digital economy.”
The European Commission’s adequacy decision, which serves as the legal basis for the DPF, followed an in-depth evaluation of the reforms implemented by the United States. These include the Executive Order on Enhancing Safeguards for United States Signals Intelligence Activities, which introduced binding safeguards to ensure the necessity and proportionality of U.S. intelligence collection, reinforced oversight, and enhanced redress mechanisms including the establishment of a Data Protection Review Court.
The framework has since been validated through the Commission’s first periodic review, which confirmed that U.S. authorities had successfully implemented the necessary structures and procedures to ensure that the DPF functions as intended in practice. Today’s ruling further strengthens confidence in the DPF, providing a robust legal foundation for the estimated $7.1 trillion in annual trade and investment supported by transatlantic data transfers.