What happened
The US Supreme Court ruled in Trump v. Slaughter that the FTC cannot be an independent agency. The decision calls into question the independence requirement for the EU‑US Data Privacy Framework, effectively collapsing the adequacy decision. The European Commission may need to repeal the framework and controllers must reassess data transfers.
Why it matters for trust and compliance
- Its status is decided. The case has an outcome that others may cite.
- The ruling threatens the legal basis for EU‑US personal data flows, forcing a reassessment of cross‑border transfers.
- It relates to GDPR. The regulations library explains what that law requires.
Who is affected
technology controller processor data broker platform European Commission Federal Trade Commission noyb
Recommended actions
- Check that privacy notices describe the practices this addresses.
- Review the transfer mechanisms relied on for affected data flows.
- Inventory AI or automated decision systems in scope and their assessments.