The European Court of Justice (ECJ) ruled, on 30 May 2006, that "neither the Commission decision finding that the data are adequately protected by the United States nor the Council decision approving the conclusion of an agreement on their transfer to that country are founded on an appropriate legal basis".
The ECJ judgment thus annulls both the Commission and Council decisions. The agreement as such was not annuled.



