ILPA notes that EU law specifically prohibits the transfer of personal data to a third country or international organisation for law enforcement purposes, “if there is a real risk that, as a result of such a transfer, the data subject might be subjected to torture, inhuman and degrading treatment or punishment or any other violation of his or her fundamental rights.’”127