On July 16, the Court of Justice of the European Union invalidated the Privacy Shield, a program leveraged by companies to transfer European citizens’ personal data to the United States, due to a lack of remedies against potentially unrestricted U.S. government access.

Lawyers say the decision forces companies to rely on or redraft data transfers contracts, and abide by a new level of data review that may require technical safeguards, or bypass transferring EU data to the U.S. altogether.