Overseas transfers of personal identifiable data to US based tech companies could be putting millions of UK subjects at risk due a lack of knowledge concerning lawful data transmission.