The European Commission might have given a green light to the latest mechanism to allow safe data transfers between the European Union and the United States, but experts have mixed views regarding how long it will last and whether it is even legal.

The commission last week issued its adequacy decision on the EU-U.S. Data Privacy Framework (DPF), which means it believes surveillance changes agreed to by the United States have the country offering a similar level of data protection to the European Union under the General Data Protection Regulation (GDPR).

Max Schrems, the privacy campaigner who has successfully scrapped the two previous attempts to ensure safe transatlantic data transfers—Safe Harbor and Privacy Shield—has already said the new framework isn’t that different from its predecessors and doesn’t come close to meeting the requirements laid out by the Court of Justice of the European Union (CJEU).