GDPR Update: Transfer Of Personal Data (Outside The EEA)

Introduction

In this GDPR update, we will address the transfer of personal data outside the European Economic Area (EEA).

Similar as under the current Data Privacy Directive 95/46/EC (the Directive), the transfer of personal data outside the EEA remains restricted under the General Data Protection Regulation (the GDPR). However, the GDPR introduces several changes in this respect, including new derogations for the cross-border data transfers.

Adequate level of protection

As a general rule, the transfer of personal data to a country outside the EEA (generally referred to as a "third country") may only take place if that country ensures an adequate level of data protection.