The E.U.-U.S. Privacy Shield is supposed to replace the “Safe Harbor” data-transfer agreement that was invalidated by the Court of Justice of the European Union. Yet a newly released draft of the agreement shows it has the same fundamental flaws — and includes a carve-out for mass data collection.…