evidence: Non-EU based businesses processing EU citizen's data have to appoint a representative in the EU. [...] - The non-EU country's protections are deemed adequate by the EU. - Your company takes the necessary measures to provide appropriate safeguards, such as including specific clauses in the agreed contract with the non-European importer of the personal data.