Privacy Shield does not guarantee GDPR compliance

US firms certified under the regime must still ensure their data protection and processing meets the requirements of the EU regulation, warn lawyers.