Not quite. They just require that you adequately protect PII. Since that is very expensive to do, only large companies tend to do it. Smaller companies probably

Not quite. They just require that you adequately protect PII. Since that is very expensive to do, only large companies tend to do it. Smaller companies probably just ignore it... https://www.wordfence.com/blog/2015/10/european-data-on-usa-servers-safe-harbor/ https://www.wordfence.com/blog/2015/10/european-data-on-usa-...