In a mixed-bag judgment delivered on Thursday, Europe’s highest court gave its blessing to the mechanisms used by companies to transfer European personal data around the world but struck down a major data protection deal agreed between the U.S. and the EU just four years ago, known as the Privacy Shield.

The judgment handed down by the European Court of Justice—which brings a layer of finality to the long running wrangle between Facebook and Austrian activist Max Schrems—means that companies like Facebook can continue to lawfully transfer European customer data to other parts of the world.