You are drafting a secure internal email containing sensitive personal data of EU citizens to a colleague in another member state. To ensure compliance with EU data protection standards and maintain cybersecurity, which of the following actions is the most appropriate first step before sending the message?