European General Court Upholds EU-U.S. Data Protection Framework

On September 3, 2025, the General Court of the European Union upheld the validity of the EU-U.S. Data Protection Framework (DPF), following a call for its annulment brought by a French citizen.

French Member of Parliament Philippe Latombe, who also sits on the board of the French data protection authority, the Commission Nationale de l'Informatique et des Libertés, brought an action, in his personal capacity, in the General Court of the European Union calling for the annulment of the DPF. The General Court (also known as the European General Court (EGC)), along with the European Court of Justice (ECJ), make up the Court of Justice of the European Union (CJEU). The EGC is the junior of the two, and its decisions may be appealed to the ECJ.