The new EU-US Privacy Shield agreement, which potentially replaces Safe Harbor, faces key questions about how data is moved between Europe and the US.