The German Data Privacy authorities have picked up on the limitations of the US 'Safe Harbor" accreditation system. This system, in theory, makes it legal for EU and UK companies to transfer data to the US by just checking that the US recipient is on the "Safe Harbor" list maintained by the Federal gtrade Commission (FTC).