Processing that affects individuals in multiple EU countries or involves data transferred across borders (Article 4(23)).