The Court of Justice of the European Union (CJEU) struck down the Privacy Shield agreement. UK-US data flows were due to be relatively uncomplicated post-Brexit. UK companies may find limited options for receiving data from the EU and US. A new version of Privacy Shield/Safe Harbor is a possible option. The majority of organisations say they will continue to use US-based or non-EEA/non-UK data processors in the light of the Shrems II case.”]