A TIA is necessary for every transfer of personal data to a target country outside the EEA or for which no adequacy decision is in place.