Usage of a VPN when traveling is the best practice for protecting your data across the internet. There are two major issues however that threaten compliance using a VPN:
You must know where your data is hosted because you cannot have data hosted outside the US. And, when you select a VPN provider, you need to add them to your Vendor Risk Management List as they may access, control or store your private data passing through their service.
The solution is to take ownership of your own VPN. A business-grade next generation gateway VPN feature enables internet connection with encryption through your secure firewall from anywhere in the world! https://fcicyber.com/network-security/