On February 10, 2026, the Court of Justice of the European Union (CJEU) confirmed in a landmark judgment that companies can seek annulment of European Data Protection Board (EDPB) binding decisions before the adoption of a final decision by their lead Supervisory Authority (SA).
This decision opens the floodgates to substantive review of EU-level General