Thousands of companies make use of the agreement when transferring personal data to the US, and the ruling in the case — brought by Austrian law student Max Schrems — that the scheme is invalid has
prompted widespread uncertainty about privacy obligations.