Safe Harbour and PS1 were bad from the start. This one actually has the chance to grow into something. It’s a solid basis and they learned from some mistakes from the past. Will be interesting how / when the US actually implements the promises made in the framework. I hope this time they take it more seriously. From a European perspective the option to have a competent partner for dialogue and questioning in the US was a big issue in the past. Plus, if the companies certified under it don’t include the types of data that are of interest to you under this framework, you are still protected by the other mechanisms under GDPR (SCCs and BCR), so chill. Meta won’t qualify for this one anyway, but a good US company like Microsoft does and that fixes a lot of political questions here in the EU in regards of the use of M365.