A Practice Note providing an overview of encryption as a supplementary measure for cross-border data transfers to third countries under the EU General Data Protection Regulation (GDPR) following Schrems II. This Note discusses encryption technology, encryption methods organizations can use to secure data transfers, key management, cloud services configuration, threats to encryption, and best practices for using encryption to provide additional safeguards for third-country data transfers under the GDPR.