In July 2016, the European Commission adopted its highly anticipated EU-US “Privacy Shield,” setting up a new data protection framework for organisations that transfer EU citizens’ personal data to the US. More than 4,000 organisations are expected to have to adapt their privacy policies and practices accordingly, and sign up to the new statutory requirements.