EU Board Advises Companies to Assess Foreign Data Surveillance