A recent IAPP analysis argues that the U.S. Supreme Court’s decision in Trump v. Slaughter does not invalidate the EU-U.S. Data Privacy Framework’s redress mechanism. While the ruling limits Congress’s ability to shield certain executive officials from presidential removal, it does not address the executive branch’s authority to create and maintain an independent Data Protection Review Court (DPRC), which provides redress for EU individuals regarding U.S. intelligence activities.
The authors conclude that the DPRC’s legal foundation remains intact and that transatlantic data transfers under the EU-U.S. Data Privacy Framework continue to be lawful. They note that organizations relying on the framework should see no immediate practical impact from the decision.
To read the article, click here.
* * *
These statements are attributable only to the author, and their publication here does not necessarily reflect the view of the Cross-Border Data Forum or any participating individuals or organizations.
