Philippe Latombe challenges the Commission Implementing Decision C(2023) 4745 final of 10 July 2023, which finds that the EU-US Data Privacy Framework ensures an adequate level of protection for personal data under Regulation (EU) 2016/679 (GDPR).

He argues that the adequacy decision violates fundamental rights (Articles 7, 8, and 47 of the Charter), does not provide sufficient safeguards against bulk data collection, automated decision-making, or effective judicial remedies, and fails to ensure sufficient security obligations for data controllers under US law.