Where is the place for a French citizen to 'resolve' the issue when being spied upon by the GCHQ? Where is the place for a UK citizen to 'resolve' the issue with the BND?
My french isn't great, but in the UK you can file with the ICO. You might not be happy with the outcome, but it is the start of the legal process. The reason safe harbour is falling apart today is precisely because a determined EU citizen filed such a complaint against a US corp.
From my understanding the reason safe harbor is falling apart is because a citizen went to court because the Irish data protection agency didn't want to investigate the data transfer of Facebook in detail. Not because a determined citizen files a complaint against an US corp.