EU court ruling strikes blow to trans-Atlantic data flows