Safe Harbor Invalid: The consequences are a potential bureaucratic nightmare: In theory, American companies with European customers could now end up trying to follow 20 or more different sets of national data privacy regulations. Up to 4,500 US companies — not just tech firms — have relied on Safe Harbor.