Last month, an executive order detailed the EU-US Privacy Shield 2.0, a new legal framework for transatlantic data flows made necessary by the Schrems II ruling. We caught up with Max Schrems, the privacy activist who gave the name to the two landmark verdicts, to discuss the new arrangement and the potential implications of a Schrems III. We also touched upon what is currently wrong with the GDPR enforcement and what more can be done to fix it in the near future.