A recent US Supreme Court decision could jeopardize the legal framework governing data transfers between the European Union and the United States, according to legal and cybersecurity experts. The ruling, which some interpret as weakening the independence of the Federal Trade Commission (FTC), may give privacy advocates new ammunition to challenge the current EU-US Data Privacy Framework.
Dr. Ilia Kolochenko, founder of cybersecurity firm ImmuniWeb, warns that while the ruling has no immediate impact, it is "poised to have huge consequences" in the long term. "This milestone ruling gives numerous European data privacy watchdogs and advocates an unprecedented strong argument that any transfer of personal data to the US is now illegal," he stated.
Prominent privacy group NOYB, led by activist Max Schrems, has already indicated plans to challenge the existing data transfer agreement. This follows the successful legal challenges known as Schrems I and Schrems II, which invalidated two previous EU-US data transfer pacts, causing significant disruption for businesses on both sides of the Atlantic.
However, the outcome is far from certain. Dr. Kolochenko notes that the political and economic climate has shifted. The European Commission has acknowledged concerns about overregulation, and the current US administration has signaled it may retaliate against further penalties on American companies.
"The question is not only legal, but also political," Dr. Kolochenko explained. "If the EU now acts imprudently, its own businesses may suffer perceptible and long-lasting damage from a swift deterioration of the EU-US commerce and economic collaboration."
While another overhaul of the data transfer regime seems inevitable, experts hope for a solution that is "less radical and painful for businesses on both sides of the Atlantic."
