You are an EU official responsible for managing a confidential database containing personal information of European Union citizens. According to the General Data Protection Regulation (GDPR) and EU security principles, what is the most appropriate technical measure to ensure the confidentiality of these data when transferred through an insecure network or stored in a cloud server provided by an external vendor?