In a landmark decision on data protection, the European Court of Justice's decision in Schrems v. Data Protection Commissioner last month struck down the agreement companies have relied on for 15 years to legally transfer the personal information of EU employees and customers back to the United States.