Example of GDPR compliance from PayPal?

As lon as you're transparent with why you're sending those comapnies the data then you ahve nothing to worry about.

They will all have their own mechanisms for encryption and GDPR which will shield you from prosecution.

People are blowing GDPR out of proportion, as long as you can show a paper trail that you complied and you don't woefuly do silly stuff then you will be fine