> they will never know if data has been accessed by 3rd country and what happened to it.

They should have arranged to get a 100 euro refund every time it happens, or 440 euros if the UK does it.