The Court of Justice of the European Union ruled Thursday that Privacy Shield, the EU-U.S. data protection agreement, is invalid
In order for U.S. companies to use Europeans' personal data some sort of legal justification for doing so is needed. The reason is that the U.S. lacks an EU-strength federal privacy law (or indeed any comprehensive federal privacy law at all).