U.S. organizations that collect, receive, handle, or process EU citizens' personal data are generally subject to EU privacy and data protection laws.
With the loss of the "Safe Harbor" data transfer framework in October 2015, thousands of U.S. organizations lost their primary mechanism for complying with those EU laws. The new "Privacy Shield" data transfer framework replaces the Safe Harbor and allows U.S. organizations that take part in the Privacy Shield to legally collect and process personal data of EU citizens.
Please see full publication below for more information.