Tech firms like Facebook must restrict data sent from EU to US, court rule