The Court of Justice of the European Union (CJEU) has invalidated the US-EU Privacy Shield Agreement. The agreement ensured US companies adhere to EU standards on data protection and privacy in return for being able to receive personal data from the EU. The CJEU ruled the current system did not provide data subjects actionable rights before the courts against the US authorities and so should be invalidated. Over 80% of companies transferring data out of the EU rely on SCCs, according to IAPP research.”]