On June 6, 2016, the Data Protection Commissioner for Hamburg, Germany, announced fines against three US companies for unlawful transfers of employee and customer data from the EU to the US. This action by the Hamburg Commissioner is the most significant enforcement action to date for non-compliance with current law.