The EU’s Article 29 Working Party, a collection of the EU member states’ top data protection authorities, issued a report on April 13 criticizing the proposed EU-U.S. “Privacy Shield,” which is supposed to replace the now defunct U.S.-EU Safe Harbor Framework.  While calling the Shield a “significant improvement” over the Safe Harbor, the Working Party raised serious concerns about both the commercial aspects of the Privacy Shield and the continuing ability of U.S. intelligence agencies to access EU personal data transferred under the arrangement.  The big question now is whether the European Commission will make any substantial changes to the Shield in response to the critique, or press forward with finalizing it and see how the arrangement fares when it faces the inevitable challenges by individual DPAs and crusading privacy activists.