Myrsini is working with one of her organization's European Union business partners to facilitate the exchange of customer information. Myrsini's organization is located in the United States. What would be the best method for Myrsini to use to ensure GDPR compliance?

The European Union provides standard contractual clauses that may be used to facilitate data transfer. That would be the best choice in a case where two different companies are sharing data. If the data was being shared internally within a company, binding corporate rules would also be an option. The EU/U.S. Privacy Shield was a safe harbor agreement that would previously have allowed the transfer but is no longer valid.