The ‘general data’ list, covering 64 categories, will enable certain firms to make data transfers overseas without a security assessment.