The Court of Justice of the European Union is set to review a fresh challenge to the EU-U.S. Data Privacy Framework, the successor mechanism relied on by companies to move personal data across the Atlantic after Schrems I and II struck down its predecessors. Given the CJEU's track record of invalidating prior transfer regimes over U.S.
surveillance concerns, any signal that the court is scrutinizing the DPF again will unsettle the thousands of companies now certified under it. Data-driven businesses should watch this closely and have contingency transfer mechanisms, like SCCs, ready in case history repeats itself.
European Court of Justice to Review Challenge to EU-U.S. Data Privacy Framework
