Within the last 12 months or so, two recent privacy law developments have had tremendous implications for companies controlling, processing and transferring data between the UK, EU and elsewhere: (i) the European Court of Justice Schrems II decision, and (ii) of course, Brexit. Both have thrown new challenges and questions into the mix for companies transferring data across the Atlantic, and involved in cross-border investment activities.