Data protection 1 How the GDPR on data transfer affects cross-border payment institutions Luana P. Nogueira, CurrencyFair PUBLISHED ON: 22 Jun 2020 The General Data Protection Regulation (GDPR) in Recital 23 brought an obligation to all companies that receive, control or process personal data of European Union (EU) residents to comply with the minimal safeguards stated in European legislation.