Abroad
One of the interesting aspects of this is how it's going to extend. Will the court rule it impossible to process personal data in the UK? Or France? Or India?
I know of at least one Australian business that had to roll back its offshoring plans because certain categories of data can not be held abroad, and not even handled by someone abroad. But in the EU ruling it clearly hinges on the relevant data protection laws in the US and relevant treaties between the US and the EU. So if India has the same level of data protection as the US then I suspect it will fall afoul of the EU rules too; if they're more EU-like, then proportionally less of a problem.
Biting the hand that feeds IT
