You are a digital project manager for an EU delegation preparing a report on a sensitive diplomatic negotiation. The report contains personal data of third-country nationals involved in the talks. You need to share this report with a cloud-based collaboration tool accessible by a team across the EU and a partner agency in a third country. According to EU data protection principles, which of the following actions is the most appropriate first step to ensure compliance before initiating the data transfer to the third country?