United States. Surveillance / law enforcement access. Executive order

EO 14086Executive Order 14086 on Enhancing Safeguards for United States Signals Intelligence Activities

In force
Partly verifiedMedium confidence. PCLOB independence concerns raised in 2025–26 after member removals; Latombe appeal (C-703/25 P per reports) unresolved as of research.

§1Summary

Synopsis

Requires US signals intelligence to be necessary and proportionate to defined legitimate objectives and sets up a two-tier redress mechanism for people in qualifying states. It underpins the EU-US, UK and Swiss data privacy frameworks.

Key themes
  • signals intelligence
  • necessity and proportionality
  • redress
  • Data Protection Review Court
  • qualifying states
Unique features

Introduces EU-style proportionality language into US intelligence practice through executive action, which a future President could revoke.

SaaS relevance

Underpins DPF transfers and transfer impact assessments for EU/UK customer data processed by US SaaS.

§2Obligations

Extraterritorial
Yes
Breach notification
None
DPO
No
Cross-border transfers
Basis for EU-US DPF adequacy and UK/Swiss equivalents
Maximum penalty
None (executive order)

§3Dates

Key dates
  • Adopted
  • In force
  • DOJ regulation creating Data Protection Review Court (28 C.F.R. Part 201) Oct 2022; EU adequacy decision for EU-US DPF 2023-07-10; EU General Court dismissed Latombe challenge 2025-09-03; appeal to CJEU lodged Oct 2025 and pending.

§4Text and authority

Text
Authority
ODNI Civil Liberties Protection Officer; Data Protection Review Court; PCLOB

§5Where it applies

Domestic law of
United States
Also applies in

§6Sources and verification

Verification

Medium confidence.

Partly verifiedMedium confidence. PCLOB independence concerns raised in 2025–26 after member removals; Latombe appeal (C-703/25 P per reports) unresolved as of research.