In letter, there currently is the "Transatlantic Data Privacy Framework" in place. However, the functionality of Data Protection Review Court (DPRC) in the USA is in question: "Trump then fired the Democrats in the PCLOB, leaving the five-person board with only one Republican, short of the three needed for it to formally make decisions." (*)
So, in effect, even if you were to appeal to this board, there would be no (just) recourse. In practice, there is no EU-US Data Privacy Framework in place. No one seems to care about this fact.
https://www.euractiv.com/news/deafening-commission-silence-with-no-credible-eu-us-data-oversight-left/
EDIT: 😉 PCLOB are not the same as DPRC, so supposedly DPRC should be functional, still. However, removal of any dissenting voices is worrisome to say the least. Far more detailed information how these entities interact can be found from: https://cdt.org/insights/what-the-pclob-firings-mean-for-the-eu-us-data-privacy-framework/
#privacy #GDPR