It troubles recommendations regarding how to interpret core ideas in the GDPR and may situation binding choices addressed to the data defense authorities on dispute in concrete cases concerning cross-border processing. Formally attest your compliance. An AOC (attestation of compliance) is the shape you use to signal you’ve reached PCI https://www.nathanlabsadvisory.com/cisa-certified-information-system-auditor.html