DPC, Meta Ireland did not adequately protect EU personal data during cross-border data transfers and fined 1.2 billion euros . Majority of businesses, relied upon the GDPR-approved standard contractual clauses to provide the legal basis for international data transfers.