American companies like Facebook will no longer be able to access the personal online data of EU citizens.
The European Court of Justice has ruled safeguards on data protection in the US aren't good enough.
The decision is expected to affect thousands of firms.
Cyber security expert Stewart Room says they're unlikely to have done anything wrong themselves, though: "The concern that triggered the litigation was about surveillance of electronic data in the US, by the US intelligence agencies, so it's noting to do really with Facebook or entities like that, it's about government surveillance."