Just to be clear, Privacy Shield is a self-certification. The certification process consists of filling out a few fields with generic company data to generate a

Just to be clear, Privacy Shield is a self-certification. The certification process consists of filling out a few fields with generic company data to generate a policy and then paying money. It doesn't prove a business implements privacy by design or takes any steps to ensure data protection. It just proves the business was willing to pay the registration fee and sign a bunch of legal documents that may or may not result in fines if proven to be violated.