In-house counsel at U.S. companies will need to prove they are not subject to Foreign Intelligence Surveillance Act orders while U.S. and European lawmakers find a new way to transfer data from the European Union to the United States.