The RSI security site breaks down the techniques in a few detail, but the process in essence goes like this: The info protection authorities, Doing the job with each other in the eu Information Safety Board, ought to be certain that the data security procedures in the EU are used https://www.nathanlabsadvisory.com/fair-risk-assessment.html