Wasn't that just the latest iteration of "EU pretends no other country in the world has similar national security laws to its own member states", under which multiple EU-US agreements on data sharing have already been struck down and technically any EU business probably can't use any US-based service ever if that involves sharing of personal data? Did this one get to the end of the process and result in a real fine or other penalty?

> Did this one get to the end of the process and result in a real fine or other penalty?

It did end with a judgement that it was in breach but the court didn't fine the company because they barely used Mailchimp and they stopped using it before it got to trial.