European Union: Latombe filed appeal against General Court dismissal of challenge to European Union–United States Data Protection Framework adequacy decision in Latombe v Commission

On 31 October 2025, Philippe Latombe filed an appeal (Case C-703/25 P) against a ruling by the General Court that upheld the validity of the EU-US Data Privacy Framework (DPF), seeking review of the General Court’s judgment in Case T-553/23. The appeal contests the General Court’s decision of 3 September 2025, which dismissed the action contesting the European Commission’s adequacy decision on the EU–United States Data Protection Framework adopted on 10 July 2023. In the underlying ruling, the General Court held that Executive Order 14086 established enhanced privacy safeguards for United States intelligence activities; that the Data Protection Review Court (DPRC) met EU requirements for independence through defined appointment rules, limited dismissal conditions, and protections against executive influence; and that bulk data collection by United States intelligence authorities could proceed without prior judicial authorisation where subsequent review by the DPRC ensured compliance with necessity and proportionality. The General Court further found that targeted collection must take precedence over bulk collection, that bulk collection was restricted to six specified national security purposes, and that the adequacy decision contained sufficient safeguards regarding automated decision-making and data security. The appeal asks the Court of Justice to reassess the legality of these findings.