Many companies have not yet given sufficient thought to transferring personal data to countries outside of the EER, even though unlawful transfers can result in