Denmark's data protection authority, Datatilsynet, published its assessment of a data exporter's role and responsibilities in the context of cross-border data transfers. The regulator indicated that it will hold data controllers and processors to obligations under Article 44 of the EU General Data Protection Regulation. The short guidance text is aimed at "data controllers' organizations that use European data processors, but where one or more of its sub-data processors are located outside the EU (or the European Economic Area)."