IC Oversight & Policy — 2026-07-12

Supreme Court Slaughter Decision Threatens Section 702 Intelligence Collection From Europe via EU Data Privacy Framework

BLUFSlaughter gives noyb and allied EU litigants a stronger legal basis than either Safe Harbor or Privacy Shield challenges carried, putting the transatlantic data transfer mechanism that backstops Section 702 collection from Europe on a trajectory toward its third collapse.

Austrian privacy advocate Max Schrems and his organization noyb sent a letter to the European Commission on June 30 arguing that the Supreme Court's Trump v. Slaughter ruling, which held the president may remove FTC commissioners without cause, invalidates the legal basis for the EU-US Data Privacy Framework 12. Schrems noted the European Commission's implementing decision cites the FTC's independence 259 times and called for an "orderly exit from the U.S. cloud," while announcing noyb will file suit at the Court of Justice of the EU within weeks 12. The European Data Protection Board said it is reviewing the ruling's implications for DPF oversight, and French MEP Philippe Latombe, who has a separate case pending before the CJEU, called on Commission President Ursula von der Leyen to cancel the framework immediately 2. Dechert attorney Austin Mooney and IAPP's Maneesha Mithal both said the FTC's independence was not central to prior transfer-agreement litigation; Mithal added the ruling's practical effect on the DPF is unlikely to be immediate 34.

Analysis
The Slaughter ruling reopens the legal foundation underpinning transatlantic data flows for over 3,600 US businesses operating under the framework, exposing them to years of uncertainty regardless of how the underlying doctrine resolves. Noyb's planned CJEU suit and Latombe's separate pending case create two parallel tracks toward the outcome that previously killed Safe Harbor and Privacy Shield, though the framework stays formally in force until the Commission repeals it or the court annuls it. Section 702 collection from Europe continues undisturbed for now, but the erosion of FTC independence removes the "essentially equivalent protection" premise Brussels has cited since 2000, a reading privacy attorneys close to the FTC's own operations dispute, arguing that independence was never load-bearing for the framework's design and that the ruling mainly hands Schrems rhetorical ammunition rather than a new legal mechanism. Sourcing rests on noyb's primary account, corroborated by independent secondary treatments from The Record and IAPP.

4 sources

US Supreme Court just blew up EU-US Data Transfers - noyb.eu
Supreme Court decision threatens EU-US data transfer agreement - The Record from Recorded Future News
Srsly Risky Biz: Supreme Court Undermines Section 702 - Risky Business
After Slaughter: FTC independence and EU-US DPF face potential challenges - IAPP