The Note summarizes the process for handling an individual complaint lodged by a data subject in the EU and EEA regarding an unlawful access and use of their data by the U.S. authorities. The Note specifically focuses on the personal data transmitted from the EU to the US under any data transfer mechanism under GDPR and considers complaints related to the national security context only.
Author: European Data Protection Board
Status: Adopted / Published
Adoption date: 2024-04-24
Last updated: 08 Aug 2025
Category: Miscellaneous
Subcategory: Information note