Schrems Challenges EU-US Data Framework
Coverage from PPC Land, The Record, and others
Articles
29
Active Days
156
The Topic

The EU-US Data Privacy Framework is facing renewed legal pressure after the US Supreme Court ruled that presidential removal authority applies to Federal Trade Commission commissioners, prompting privacy advocate Max Schrems and noyb to question whether US oversight still meets EU independence requirements. The European Commission and European regulators are reviewing the implications, while the framework remains in force unless it is repealed or annulled. The dispute could affect the legal basis for transatlantic data transfers and is unfolding alongside broader US efforts to expand cross-border data access, including for immigration and border enforcement.
First Article: 02/22/26
Latest Article: 07/27/26
Summary
- noyb argues that the Supreme Court ruling undermines the FTC independence cited repeatedly in the EU’s 2023 adequacy decision.
- The Data Privacy Framework remains operational unless the European Commission withdraws it or a court annuls it.
- The European Commission and EDPB are assessing possible effects on the framework’s oversight mechanisms.
- A new legal challenge could create prolonged uncertainty for companies transferring personal data between the EU and US.
- The dispute sits within a wider transatlantic conflict over data localization, regulatory autonomy and US access to European data.
- Separate EU-US negotiations would expand sharing of traveler biometrics and other sensitive information for border enforcement, but legal safeguards remain unresolved.
History
The update sharpens the legal threat to the EU-US Data Privacy Framework by tying noyb’s challenge directly to the Supreme Court’s FTC-independence ruling and to an active review by EU regulators. It also more clearly separates this from parallel border-enforcement data-sharing talks, which now appear as a broader but still unresolved privacy issue.
The main change is a sharper legal trigger: a June 2026 US Supreme Court ruling on FTC independence has renewed doubts about the durability of the EU-US Data Privacy Framework. The story now emphasizes that the framework is still in force but increasingly treated as something companies must hedge against, rather than assume is settled.
