As known, the General Data Protection Regulation (“GDPR”) stipulates that the transfer of data to third countries can only take place if the European Data Protection Board accepts that such countries ensure sufficient data security through their domestic legislation or international treaties to which they are parties.