There are contractual and technical security measures businesses should consider to minimise privacy risks that arise when transferring personal data from the EU to the US and other jurisdictions outside the European Economic Area (EEA).

https://www.pinsentmasons.com/out-law/analysis/data-transfers-demand-due-diligence-after-schrems-ii