Data exchange with the USA was allowed, because the USA is considered “adequate”, but not anymore…
As a DPO it’s your task to foresee adequate awareness. The accountability principle requires you to be able to objectively demonstrate compliance. So, here are…