The Safe Harbour agreement allowed European organisations to transfer data to organisations in the US, where data protection legislation varies from state to state and is often not compatible with EU law, provided the US organisation pledged to apply EU standards to the handling of data.