An Austrian student’s displeasure with Facebook has invalidated the longstanding trans-Atlantic Safe Harbor program for international data transfers.

Concerns about data privacy, and that student’s complaint over whether Facebook was complicit in snooping by U.S. intelligence agencies, reached the European Court of Justice, setting up an Oct. 6 ruling that the agreement was invalid, putting multinational and online companies on alert that much greater compliance demands are on the horizon.