Almost two years after the Schrems II ruling and the Privacy Shield case, the legal situation for transatlantic data transfers remains precarious. Companies that transfer personal data from the EU to the US can currently hardly do so with legal certainty. And an actual, substantial agreement remains up in the air. Nevertheless, there is some hope.