US firms may be exposed to GDPR compliance issues

The US-EU Privacy Shield does not impose adequate rules around the use of data by US firms, meaning some could flout their GDPR compliance.