Seven months following the CJEU’s decision (C-311/18) to abolish Privacy Shield as a safe harbor for the transfer of personal data by EU data exporters to U.S. recipients, businesses on both sides of the Atlantic are still searching for reliable guidance as to how to fill this void.