A TIA has to be performed prior to the beginning of the third-country data transfer in order to evaluate the transfer and to implement additional safeguards if needed.