CRS identifies lingering questions for U.S.-EU Privacy Shield

The Congressional Research Service says lingering questions remain for American companies doing business in Europe despite the recent agreement on the U.S.-EU Privacy Shield intended to address a European court ruling last year that threw out a decade-old arrangement.

“Until the new U.S.-EU Privacy Shield Agreement is formally concluded and implemented, companies engaged in transatlantic data transfers must employ other means to legitimize such transfers,” concludes the May 19 CRS report.

CRS recommends that companies rely on model contract...