According to the European Data Protection Board, which of the following concepts or practices does NOT follow from the principles relating to the processing of personal data under EU data protection law?
A controller in the EU is planning to transfer personal data, via a processor, to a third country. What is the recommended first step according to the EDPB Opinion 22/2024?