Good because data protection is probably the area where the Commission has consistently failed to act in the interests of EU citizens.
Not that the ICO has been any better.
Repeated attempts to get them to justify the use of other measures like model clauses or binding corporate rules - both of which they seem to think are still acceptable - don't get any answers. I've tried, and the best they seem to be able to manage is to shrug their shoulders and tell us that these measures haven't been thrown out of court quite yet, whilst completely failing to look at them in any critical sense.
The ICO seem to expect somebody else to come to a conclusion for them when it comes to the suitability of these measures. God forbid that some member of the public expect the ICO to do their job and come to one themselves.
Biting the hand that feeds IT
