The EU General Court has ordered the European Commission to pay around $400 to a German citizen for breaking its own data protection regulations. The court found that the commission transferred the citizen's personal data to the US without proper safeguards. This violated Europe's General Data Protection Regulation (GDPR), the court said.