„We are perfectly capable of assessing the risk ourselves."
Are you sure about that?
Article 96 GDPR
Relationship to previously concluded agreements
International agreements which provide for the transfer of personal data to third countries or international organisations and which were concluded by Member States before 24 May 2016 and which are in accordance with Union law applicable before that date shall remain in force until they are amended, replaced or repealed.
