In July the European Court of Justice (ECJ) ruled that the US privacy shield, which had previously allowed data transfers of personal data from the EU to the US in respect of businesses who were signed up to it, did not provide sufficient safeguards for the protection of EU citizens personal data. What does this ruling mean for businesses who need to transfer personal data?