The New EU-US Data Privacy Framework: A Way Forward Or Another Dead End?

In the ever-evolving landscape of privacy and data protection, the European Union (EU) and the United States (US) have taken a significant step forward in re-building their relationship, and in particular when it comes to the long-disputed area of international data transfers. In the aftermath of the Court of Justice of the European Union's (CJEU)'s Schrems II ruling in July 2020, which invalidated the EU-US Privacy Shield, the European Commission has adopted an adequacy decision for a new EU-US Data Privacy Framework (DPF) on the 10^th July 2023. This decision has spread hopes that some stability may be secured in this area this time. However, it has only been almost three months since the decision has been reached and there have already been referrals to the CJEU regarding the legality of the framework and the extent to which it provides the necessary safeguards for the protection of personal data transferred to the US as so required under the GDPR.