The plaintiff had argued that the US Data Protection Review Court (DPRC) lacked independence and that practices employed by US intelligence agencies regarding data collection were unlawful However, the Court determined that the appointment of DPRC judges and its operational procedures are subject to a number of safeguards and conditions designed to ensure the independence of its members Furthermore, the Court acknowledged the European Commission’s ability to monitor the arrangement and respond appropriately should changes occur within the US legal framework
Regarding the collection of personal data, the Court highlighted the availability of subsequent judicial review through the DPRC The ruling found no violation of requirements set forth in prior judgments and affirmed that the level of legal protection available in the United States is equivalent to that guaranteed by Union law (Case T-553/23)
