The Privacy Shield was agreed in 2016 following more than two years of difficult negotiations over how data transferred by companies to the United States would be protected in line with tough EU data protection.