Regulatory Watch  /  European Union  /  Guidance
Moderate impactGuidanceAnnounced

EU‑US data transfers face imminent risk as US legal changes could undermine TAFPF and SCCs

The blog notes that most EU‑US transfers rely on the Transatlantic Data Privacy Framework (TAFPF) or Standard Contract Clauses (SCCs), which depend on fragile US laws and executive orders. It warns that upcoming US Supreme Court decisions and possible overturning of Executive Order 14.086 could invalidate these mechanisms. Controllers are urged to prepare by considering alternative transfer tools such as SCCs or BCRs.

Why it matters: Potential US legal shifts could disrupt the legal basis for EU‑US data flows, forcing EU controllers to reassess cross‑border transfer mechanisms.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
EU-US Data Transfers: Time to prepare for more trouble to come
noyb · primary source · Dec 10, 2025
EU-US Data Transfers: Time to prepare for more trouble to come
noyb · Dec 10, 2025
Details
JurisdictionEuropean Union
RegulatorEDPB
LawGeneral Data Protection Regulation
StatusAnnounced
PublishedDecember 10, 2025
Effectivenot stated
OrganisationsFederal Trade Commission, Data Protection Review Court, European Commission, Meta
Topicscross border transfer, privacy, data governance, security, data minimization
Datapersonal