Coming on the heels of EU’s Article 31 Committee endorsement, EU and U.S. officials officially approved the Privacy Shield today. While the agreement will take effect immediately, U.S. organizations will be able to certify with the Department of Commerce starting Aug. 1. The approval marks the end of a monthslong process that included sharp rebukes over initial language and a breakthrough in negotiations on the day the UK voted to leave the EU .

But far from instilling confidence in transatlantic data transfers, experts are warning that the agreement may be on shaky legal ground.