In July 2023 the Commission published a new Adequacy Decision (the so-called EU-US Data Privacy Framework) giving the green light to transatlantic data transfers. This is the third attempt to establish a transatlantic data transfers framework in compliance with the GDPR. The two previous Adequacy Decisions - Safe Harbour and the Privacy Shield - were struck down by the CJEU due to their failure to secure an equivalent level of data protection in the US and for their violation of fundamental EU privacy rights. The new Adequacy Decision is expected to end up before the CJEU once again, which naturally leads to legal uncertainty. The panel will discuss a toolbox of ideas to overcome the unresolved dilemmas related to EU-US privacy, particularly over how to guarantee independence in the Adequacy Decisions and protect EU citizens’ rights.