Firms are spending tens to hundreds of millions building new data centers in the EU to comply with post safe-harbor regulations in order to avoid hefty fines; up to $20m USD or 4% of global revenues.  Despite their best efforts, employees' unsanctioned use of cloud applications that contain personal data could still render companies liable.