I've previously written about how the EU-US Privacy Shield had finally been approved by EU Governments.  Well now the data protection authorities have had a chance to comment and, taking a pragmatic and sensible approach in the circumstances, have stated that it will not be challenged for at least a year.

It gives the Privacy Shield a chance to prove itself, whilst also giving companies involved in trans-Atlantic transfers of personal data some short term certainty as to how to legitimise that transfer.  That's probably the right thing to do in the circumstances.

It's sensible to keep it under review, but that does mean that any steps that companies take now will need to be noted for review in 12 months time.  Just in case the rule book is re-written again.

One to watch.