The European Court of Justice (ECJ) recently invalidated the EU-US Privacy Shield, which allowed companies to transfer personal data to the US. To keep these vital transfers flowing while complying with the ECJ’s ruling, security, and risk professionals must take these five steps.