Supreme Court ruling jeopardizes EU-US data transfer framework

Supreme Court Ruling Overview

The U.S. Supreme Court ruled that President Donald Trump acted legally when he removed FTC Commissioner Rebecca Slaughter without cause. This ruling raises concerns regarding the independence of regulatory agencies, significant for various sectors, including data privacy.

Impact on Data Privacy Framework

The EU-U.S. Data Privacy Framework (DPF), which was adopted in 2023 to facilitate data transfers, is now under threat. The framework relies on the independence of the Federal Trade Commission (FTC) to oversee data collection practices and ensure compliance with EU regulations.

Max Schrems' Legal Action

Max Schrems, founder of the privacy group noyb, announced plans to sue to invalidate the DPF. He claims that the foundation of the EU-U.S. data transfer scheme is compromised and urges the EU to reassess its data-sharing strategies with the U.S.

Financial Implications of the Framework

Experts estimate that the existence of the DPF supports approximately €1.7 trillion ($1.9 trillion) in transatlantic trade. Losing this agreement could have significant ramifications for U.S. companies relying on European data, including Meta and Google, which have indicated potential withdrawal from Europe.

Response from European Officials

European Commission officials have acknowledged the Supreme Court ruling and are assessing its implications on the EU-U.S. agenda. However, they have not provided specific details on their response plan.