The difference to Safe Harbour is that the client can revoke their consent at any time. After that the data must be pulled off US servers. If I ask Facebook to

The difference to Safe Harbour is that the client can revoke their consent at any time. After that the data must be pulled off US servers. If I ask Facebook to delete my data, they are absolutely bound by this. There is no legal way anymore to just hide the data from me.