Personal data is meant to circulate without boundaries inside the European Union (EU). The General Data Protection Regulation [1] (GDPR) subjects personal data transfers outside the EU and the ...