In the GDPR worldview, you classify the world into adequate places where if you send your data to it, it will not create toxicity or pollution. The not adequate places, the individual data processors have to prove that they are adequate even though they are in a desert of not adequate laws, regulations and market.