Have the tee-shirt
Yep. An Insurance Broker that I worked for previously shipped its personnel database to the USA, it didn't claim safe harbour or even have it (I checked). I actually complained to the ICO, and was told by someone on the other end of the phone that it wasn't my problem and to "go away".
Sometimes we really need Europe to pounce on these offenders.
No pithy comment because I'm not in a pithy mood.