They rely on the (so far correct) assumption that a lock-out from the EU isn't politically intended. Cf Safe Harbour, Privacy Shield, which were both intended t

They rely on the (so far correct) assumption that a lock-out from the EU isn't politically intended. Cf Safe Harbour, Privacy Shield, which were both intended to prevent exactly that but failed to do so. (IMHO because the US and EU legislation on privacy are so fundamentally opposed that truly reconciling them will be impossible) Edit: in the meantime the occasional slap on the wrist by regulators is just the cost of doing business in the EU