The E.U.-U.S. Data Privacy Framework (DPF) lives. Last month, the European General Court (EGC) dismissed a challenge brought by French Member of Parliament Philippe Latombe to annul the DPF – the mechanism that allows for the lawful transfer of personal data from the E.U. to certified organizations within the U.S. – and confirmed the framework’s validity. This article provides an overview of the factual and legal context underlying the EGC’s decision, the key rulings and practical considerations around data transfer practices. In addition, since the decision is far from likely to be the last word on the adequacy of the DPF, this article discusses certain future challenges that may be brought. See “Navigating Recent Changes to China’s Data Privacy Laws in Internal Investigations” (Jun. 5, 2024).