EU and US policymakers, privacy experts and small business voices explore questions left unanswered by the invalidation of Privacy Shield.