Answer:
because the Department of Commerce thought that american companies would not be able to comply with European directives regarding personal data protection.
Explanation:
A safe harbor is a provision that specifies which conducts will not be considered to violate or break a given rule.