IANAL but it doesn't. Safe Harbour has always been utterly useless and no guarantee of anything. It was nothing more than a voluntary agreement with copious get out clauses and was never backed up by law. So in short, a UK organisation has passed our personal data to data processors/holders that do not comply with the Data Protection act.
Biting the hand that feeds IT
