EU General Court Upholds The EU-US Data Privacy Framework

Introduction

On 3rd September 2025, the General Court of the European Union delivered its judgment in Case T-553/23, Philippe Latombe v. European Commission, whereby it dismissed the action brought by Mr. Philippe Latombe (the "Applicant") seeking the annulment of the European Commission's Implementing Decision (EU) 2023/1795 on the adequate level of protection of personal data under the EU-US Data Privacy Framework (the "Adequacy Decision"). The Applicant sought the annulment of the Adequacy Decision on the basis that the EU-US Data Privacy Framework (the "DPF") does not afford a level of protection of personal data essentially equivalent to that guaranteed within the European Union under the General Data Protection Regulation (the "GDPR") and the Charter of Fundamental Rights of the European Union (the "Charter").