The future of international data transfers: Managing legal risk with a ‘user-held’ data model · Study