Development of a risk index for cross-border data movement