The EU Parliament and the EU Data Protection Supervisor lobbed a new round of attacks on the draft EU-US “Privacy Shield,” adding to the brickbats hurled by the EU’s Article 29 Working Party in April. The Privacy Shield is meant to replace the now defunct U.S.-EU Safe Harbor Framework as a means for permitting the transfer of personal information from the European Union to the United States. Though cloaked in mild bureaucratic language, the criticisms of all three authorities cut to the heart of the whole endeavor, and call into question whether any transfer mechanism would be acceptable without fundamental changes in U.S. surveillance practices. It remains uncertain, however, whether the critiques will move the European Commission to seek major changes in the Privacy Shield. And it is doubtful that the United States would be willing to countenance the sorts of changes necessary to placate the critics.