Sept. 30 marked the last day for companies to self-certify for the EU-U.S. Privacy Shield, a move that would allow them to reduce compliance obligations for third-party vendors over a nine-month grace period. However, not every company with business in the European Union rushed to the gate to get their certification completed—many have chosen to continue relying on model contracts (aka model clauses), which are service provider alternative agreements with their customers to ensure the transfer of data to other countries.

And while registration for the grace period has passed, the option to self-certify remains open for businesses. Here are some reasons to still consider self-certification: