US Supreme Court just blew up EU-US Data Transfers

The recent US Supreme Court decision in *Trump v. Slaughter*, ruling that the US Federal Trade Commission (FTC) may no longer operate as an independent entity, casts significant doubt on the validity of EU-US data transfer frameworks. Since 2000, the European Union has relied on the FTC's presumed independence as a cornerstone for agreements governing the flow of personal data between the continents. This ruling directly challenges the fundamental EU legal requirement for independent oversight in data protection matters. The EU-US Data Privacy Framework, the latest iteration of these agreements following previous annulments by the European Court of Justice in *Schrems I* and *Schrems II*, specifically cites the FTC's independence 259 times. This reliance underscores the critical nature of the FTC's independent status to the framework's legitimacy. With the Supreme Court's decision, a key pillar of this arrangement has been undermined, potentially disrupting established data flows essential for many European businesses. This development raises concerns for EU citizens whose personal data is transferred to the US, as well as for European companies that have outsourced data processing to US-based cloud providers. The EU mandates "essentially equivalent" data protection standards for third countries, and the perceived lack of independent oversight in the US now jeopardizes the adequacy of these protections. Privacy advocates are urging the European Commission to re-evaluate and potentially withdraw the current data transfer adequacy decision.