As a digital communications officer for an EU delegation, you are preparing a secure file transfer of sensitive diplomatic documents to a partner institution in a third country. The documents contain personal data of EU citizens. According to the EU's data protection framework and cybersecurity principles, which of the following actions best ensures compliance and security before the transfer?