This article examines the criteria raised by the CJEU and analyzes whether the Privacy Shield framework adequately addresses the CJEU’s concerns. It also looks at whether the proposed framework provides EU citizens with an “essentially equivalent” level of protection when their personal data is transferred to the United States. And finally, the article explains alternative methods that in-house counsel can use to continue the legal transfer of data from the European Union.