Since the entire Privacy Shield has been ruled invalid it seems all EU-US transfers/multinational corporations which process personal data are in a tough spot. I think Max Schrems (who took Facebook, among others, to court on GDPR) has a good explanation:

https://noyb.eu/en/project/eu-us-transfers

> At its core, this case is about a conflict of law between US surveillance laws which demand surveillance and EU data protection laws that require privacy.

I really hope that in the (near) future we figure out a system of governance to better resolve inter-national conflict. I assume these conflicts will only increase as we increasingly interact across national borders.

Why do you think privacy is not involved? Currently if a US company stores data on EU citizens then the US government can compel them to produce that data in a way that's not compliant with GDPR. That seems to be a pretty unambiguous privacy issue (not arguing that there are probably some other politics going on of course).

Please, don't hold out, enlighten us with your unique insight.