Whenever you are working with personal data you do have to use GDPR compliant data sharing tools:

• Surf drive surfdrive-store-and-share-your-files-securely-in-the-cloud
• Surf Research drive researchdrive
• Surf Filesender filesender.surf.nl
• VRE (Virtual Research Environment) vre
• STRW sftp (You need an STRW account for this)
• STRW https disclosure via personal or project websites

When you are using non-personal data and data that is not proprietary, so data that is open access, you can user non-GPDR compliant tools:

• Google Drive drive
• Dropbox www.dropbox.com
• WeTransfer wetransfer.com
• STRW anon-ftp anonymous_ftp

You are personally responsible for using the correct tool for your science data.