European data protection standards are supposed to apply when data from European users is stored on US servers. According to the landmark European Court of Justice "Safe Harbor” ruling, this isn’t always ensured. The EU and U.S. now have until the end of January to agree on new guidelines. For smaller companies in particular, the cost of meeting any new guidelines may be steep, especially if they are forced to use more expensive data-storage solutions within the EU.