Transfer to countries guaranteeing an adequate level of protection
Pursuant to the provisions of Art. 45 of the General Data Protection Regulation and Art. 36 of the Law Enforcement Directive, the Commission may decide that a third country or its territory or an international organization guarantees an adequate level of personal data protection. If the Commission issues a decision that an adequate level of personal data protection is ensured in a specific third country or international organization, it is possible to transfer personal data to this third country or international organization without the need to obtain additional permission.
The Commission issued an adequacy decision under the General Data Protection Regulation for the following countries:
- Japan Commission Decision 2019/419
- United Kingdon Commission Decision 2021/1772
- Republic of Korea Commission Decision 2022/254
The Commission issued an adequacy decision under the Enforcement Directive for the following countries:
- United Kingdom Commission Decision 2021/1773
The Commission issued a decision on adequacy according to Directive 95/46/EC for the following countries (the decisions remain valid even in the new legislation):
- Principality of Andorra Commission Decision no. 2010/625/EU
- Argentina Commission Decision no. 2003/490/EC
- Faeore Islands Commission Decision no. 2010/146/EU
- Guernsey Commission Decision no. 2003/821/EC
- Israel Commission Decision no. 2011/61/EU
- Jersey Commission Decision no. 2008/393/EC
- New Zealand Commission Decision no. 2013/65/EU
- Canada Commission Decision no. 2002/2/EC
- Isle of Man Commission Decision no. 2004/411/EC
- Switzerland Commission Decision no. 2000/518/EC
- Eastern Republic of Uruguay Commission Decision no. 2012/484/EU