As we reach GDPR’s 10th anniversary, international data transfers continue to impose significant challenges to both organizations and regulators. From crucial court rulings to evolving adequacy discussions, ensuring lawful, resilient, and trustworthy cross-border data flows remains a major concern for privacy professionals. To effectively navigate this fragmented and fast-changing landscape, the performance of appropriate risk assessments and implementation of effective technical and organizational measures are indispensable. This panel will examine key developments shaping international transfer compliance, also reflecting on the potential role of underutilized compliance tools such as codes of conduct and certifications. Finally, the discussion will situate these challenges within the context of the proposed GDPR simplification under the Digital Omnibus Regulation, assessing its potential implications for the future of international data transfers.