Your firm has been retained aspairof a complex internal fraud case for a large corporation.Aspartof the investigation you are seeking to collect

transaction records held in a subsidiary office located in another country.

The country has strict laws governing cross-border sharing of its citizens' personally identifiable information It does allow data sharing under sate harbor agreements with companies that meet certain data protection standards but your company does not currently have the criteria for such an agreement.

You are not sure il the records you are seeking would contain personal information subjecttothe country's data privacy laws but the matter is time-sensitive and reviewing these records is considered essential to move forward.

Which is Ihe BEST next step lo lake in your investigation?