Print

International Transfers

Transferring personal data beyond the EEA may create additional risks for individuals, because there might be a lower level of protection in the non-EU/EEA country or international organisation of destination. This may have a negative impact on the individuals’ ability to exercise their data protection rights, in particular to protect themselves from unlawful use or disclosure of their personal data.

For this reason, all international transfers outside of the EEA must comply with the specific rules set out in Chapter V of Regulation (EU) 2018/1725. Further explanation on how to deal with international transfers is available here.

The EDPS authorisation decisions for transfers are available below.

Filters

18
Dec
2025

EDPS Decision authorising the use of contractual clauses between the European Commission and the Turkish National Agency for the implementation of the Erasmus+ and European Solidarity Corps Programmes in Türkiye

EDPS Decision 65/2025 authorises the use of contractual clauses between the European Commission and the Turkish National Agency for the implementation of the Erasmus+ and European Solidarity Corps Programmes in Türkiye, pursuant to Article 48(3)(a) of Regulation (EU) 2018/1725. The authorisation concerns transfers of personal data in the form of remote access to the European Commission’s corporate IT tool used for the implementation of the Erasmus+ and European Solidarity Corps Programmes in Türkiye by the Turkish National Agency, the Centre For European Union Education And Youth Programmes, as processor and by other sub-processors. 

Available languages: English
18
Dec
2025

EDPS Decision authorising the use of contractual clauses between the European Commission and the Serbian National Agency for the implementation of the Erasmus+ and European Solidarity Corps Programmes in Serbia

EDPS Decision 67/2025 authorises the use of contractual clauses between the European Commission and the Serbian National Agency for the implementation of the Erasmus+ and European Solidarity Corps Programmes in Serbia, pursuant to Article 48(3)(a) of Regulation (EU) 2018/1725. The authorisation concerns transfers of personal data in the form of remote access to the European Commission’s corporate IT tool used for the implementation of the Erasmus+ and European Solidarity Corps Programmes in Serbia by the Serbian National Agency, Fondacija Tempus, as processor and by other sub-processors. 

Available languages: English
18
Dec
2025

EDPS Decision authorising the use of contractual clauses between the European Commission and the North Macedonian National Agency for the implementation of the Erasmus+ and European Solidarity Corps Programmes in North Macedonia

EDPS Decision 66/2025 authorises the use of contractual clauses between the European Commission and the North Macedonia National Agency for the implementation of the Erasmus+ and European Solidarity Corps Programmes in North Macedonia, pursuant to Article 48(3)(a) of Regulation (EU) 2018/1725. The authorisation concerns transfers of personal data in the form of remote access to the European Commission’s corporate IT tool used for the implementation of the Erasmus+ and European Solidarity Corps Programmes in North Macedonia by the North Macedonian National Agency for European Educational Programmes and Mobility, as processor and by other sub-processors.

Available languages: English
16
Dec
2025

EDPS Model Administrative Arrangement for transfers of personal data from EUIs to public authorities in third countries

EDPS Model Administrative Arrangement (Model) for transfers of personal data from EU institutions, bodies, offices and agencies (EUIs) to third country public authorities.

The Model aims to help EUIs comply with the applicable EU data protection law, Regulation (EU) 2018/1725, when they need to transfer personal data to third country public authorities under Article 48(3)(b), within the remit of their tasks.

EDPS Decision 63/205 EDPS Model Administrative Arrangement for transfers of personal data under Regulation (EU) 2018/1725 from European Union institutions, bodies, offices and agencies to public authorities in third countries
Available languages: English
Annex I: EDPS Model Administrative Arrangement (Model) for transfers of personal data from EU institutions, bodies, offices and agencies (EUIs) to third country public authorities.
Available languages: English
31
Jul
2024

EDPS Model Administrative Arrangement for transfers of personal data from EUIs to International Organisations

EDPS Model Administrative Arrangement (Model) for transfers of personal data from EU institutions, bodies, offices and agencies (EUIs) to international organisations. 

The Model aims to help EUIs comply with the applicable EU data protection law, Regulation (EU) 2018/1725, when they need to transfer personal data to international organisations, within the remit of their role.

Available languages: English