The European Court of Justice (the CJEU) held that the Safe Harbor privacy principles for the transfer of data to the US are invalid opening questions on past and future data transfers relying on such data protection rules and calling for immediate actions.