The 1995 EU Privacy Directive 95/46/EC provides that personal data of say, employees, to third countries, like the United States, may only be done with employee consent and only where the U.S. has ensured an adequate level of data protection. The EU itself can endorse a country’s compliance with data security. Some 4,410 U.S. companies doing business in the EU have long been familiar with the “safe harbor” under the Privacy Directive that permits ...