Privacy activist Max Schrems seeks to annul the EU‑US data transfer agreement via a court challenge
Executive summary: Max Schrems filed a legal action to have the EU‑US Data Privacy Framework declared invalid before the European Court of Justice, basing his argument on a recent US Supreme Court ruling that he views as favorable. The framework governs the transfer of personal data from the EU to the United States for over 5,000 companies; its annulment would disrupt cloud services, digital advertising, and financial data processing, forcing firms to rely on alternative transfer tools.
Who is involved: Max Schrems (privacy activist), European Commission, US Department of Commerce, major data‑reliant firms (e.g., Meta, Google, Amazon, financial institutions).
Likely next: Schrems will submit the complaint to the ECJ by mid‑July 2026; the ECJ is expected to hear the case within months, while the EU and US may negotiate an interim adequacy decision or rely on SCCs in the interim.
Max Schrems announced he will ask the EU’s highest court to invalidate the current EU‑US data transfer framework, citing a recent US Supreme Court decision that he says strengthens his legal position. The move mirrors his earlier successes that struck down Safe Harbor (2015) and Privacy Shield (2020). If the agreement is overturned, thousands of firms relying on transatlantic data flows would need to adopt alternative mechanisms such as Standard Contractual Clauses.
Timeline
- — Exklusiv: Datenschützer will EU-Datenabkommen mit den USA kippen (Handelsblatt)
Analysis — what this means
Likely next events
- Schrems to file the ECJ complaint by 2026-07-15
- US Department of Commerce to issue a public statement on the adequacy of the EU‑US framework by 2026-07-20
- EU Commission to begin a review of the adequacy decision by 2026-08-01
Sectors affected
- cloud computing
- digital advertising
- social media platforms
- financial services data processing
Regulatory implications
- Potential invalidation of the EU‑US Data Privacy Framework under GDPR Article 45
- Reversion to Standard Contractual Clauses (SCCs) as the primary transfer mechanism pending a new adequacy finding
- EU may launch renewed adequacy negotiations with the US to replace the framework within 12 months
Historical parallels
- Schrems I case invalidated the US‑EU Safe Harbor agreement in July 2015
- Schrems II case invalidated the Privacy Shield framework in July 2020