While transferring personal data from an EU member nation to a third country which is not deemed adequate as per EU's assessment, which of the following step is...