International Transfers

Transferring personal data beyond the EEA may create additional risks for individuals, because there might be a lower level of protection in the non-EU/EEA country or international organisation of destination. This may have a negative impact on the individuals’ ability to exercise their data protection rights, in particular to protect themselves from unlawful use or disclosure of their personal data.

For this reason, all international transfers outside of the EEA must comply with the specific rules set out in Chapter V of Regulation (EU) 2018/1725. Further explanation on how to deal with international transfers is available here.

The EDPS authorisation decisions for transfers are available below.

Filters

Filter by Publication Year

Filter by Topics/Tags

Filter by Institution

Dec

2025

International Transfers

EDPS Model Administrative Arrangement for transfers of personal data from EUIs to public authorities in third countries

EDPS Model Administrative Arrangement (Model) for transfers of personal data from EU institutions, bodies, offices and agencies (EUIs) to third country public authorities.

The Model aims to help EUIs comply with the applicable EU data protection law, Regulation (EU) 2018/1725, when they need to transfer personal data to third country public authorities under Article 48(3)(b), within the remit of their tasks.

EDPS Decision 63/205 EDPS Model Administrative Arrangement for transfers of personal data under Regulation (EU) 2018/1725 from European Union institutions, bodies, offices and agencies to public authorities in third countries

Available languages: English

Annex I: EDPS Model Administrative Arrangement (Model) for transfers of personal data from EU institutions, bodies, offices and agencies (EUIs) to third country public authorities.

Available languages: English

Topics

International Agreements

International Cooperation

Jul

2024

International Transfers

EDPS Model Administrative Arrangement for transfers of personal data from EUIs to International Organisations

EDPS Model Administrative Arrangement (Model) for transfers of personal data from EU institutions, bodies, offices and agencies (EUIs) to international organisations.

The Model aims to help EUIs comply with the applicable EU data protection law, Regulation (EU) 2018/1725, when they need to transfer personal data to international organisations, within the remit of their role.

Available languages: English

Topics

International Agreements

Jun

2024

International Transfers

EDPS Decision the use of the amended administrative arrangement between the SESAR and the Eurocontrol in the context of Eurocontrol’s in-kind contributions to SESAR

EDPS Decision authorising from 1 July 2024 the use of the amended administrative arrangement between the Single European Sky ATM Research 3 Joint Undertaking (‘SESAR’) and the European Organisation for the Safety of Air Navigation (‘Eurocontrol’) in the context of Eurocontrol’s in-kind contributions to SESAR.

Available languages: English

Topics

International Agreements

Jul

2023

International Transfers

EDPS Decision on the CJEU's use of Cisco Webex video and conferencing tools

In its Decision published on 13 July 2023, the EDPS finds that the use of Cisco Webex videoconferencing and related services by the Court of Justice of the European Union (the Court) meets the data protection standards under Regulation 2018/1725 applicable to EU institutions, bodies, offices and agencies.

Available languages: English

Topics

Transfers of data

Dec

2022

International Transfers

EDPS Decision temporarily authorising the use of the administrative arrangement between the Single European SESAR and Eurocontrol in the context of Eurocontrol’s in-kind contributions to SESAR

EDPS Decision authorising until 30 June 2024 the use of the administrative arrangement between the Single European Sky ATM Research 3 Joint Undertaking (‘SESAR’) and the European Organisation for the Safety of Air Navigation (‘Eurocontrol’) in the context of Eurocontrol’s in-kind contributions to SESAR

Available languages: English

Access to documents
Administrative and Human Resources
AI Supervision by EDPS
Article 7 - right to private life
Binding Corporate Rules
Biometrics
Money laundering
C-ITS
Case Management System
ECHR
CJEU
Communication
Computer Forensics
Council of Europe
Data retention
COVID-19
Data Breach
Right of Information
EU Passengers Name Record
Europol
Finance
IT at Work
IT
Tracking
Management of the EDPS
mHealth
PETs
Physical Security
Public Events
Regulation 2018/1725
Safe Harbour
SIS
SIS SCG
Staff Committee
Supervision by EDPS
Surveys
Article 8 - right to data protection
Right of Access
Blockchain
Encryption
Standard Contractual Clauses
Clinical Trials
Convention 108
Tax cooperation
ECtHR
Cybersecurity
Investigations
eCall
ECRIS
PNR
OECD
Profiling
VIS
VIS SCG
Adequacy Decision
Anti-fraud
Cloud Computing
EDPB - 29WP
Cybercrime Convention
Counter-terrorism
Drones
Right to Rectification
Eurodac
Eurodac SCG
Tax evasion
Privacy Shield
Mobile Devices & Apps
CIS
CIS SCG
Umbrella Agreement
Right to Erasure
Financial markets
United Nations
Recruitment
IMI
Open Data
Right to Restriction of Processing
Staff Evaluation
IMI SCG
TTIP
Working Conditions
Smart Meters
Data Portability
EES
Procurements, Grants, Experts
Right to Object
Social Networks
Automated Individual Decision-Making
Health Data in the Workplace
Anti-harassment
Data Protection Officer
Conflicts of Interest
Security & Access to Premises
Net Neutrality
Encryption
Artificial Intelligence
Ethics
Robotics
Charter of Fundamental Rights
General Data Protection Regulation
Police Directive
ePrivacy Directive
Regulation 45/2001
Rights of the Individual
Necessity & Proportionality
Privacy by Design
Interoperability
Privacy by Default
Accountability
International Agreements
International Standards
International Cooperation
Case-law and litigation
Transfers of data
Supervision coordination
Large-Scale IT Systems
Information Security
Digital Clearinghouse 2.0
Internet of Things
Personal Information Management System
IPEN
eGovernment
Borders, Asylum, Migration
Common Foreign and Security Policy
Competition
Consumers
Finance & Economy
Health
Internal Market
Digital Single Market
Judicial Cooperation
Police Cooperation
Electronic Communications, Information Society
Research & Science
Transport
Privacy in the EU Institutions
Transparency
Whistleblowing
Surveillance
Security
Technologies

Agency for the Cooperation of Energy Regulators (ACER)
Body of European Regulators for Electronic Communications (BEREC)
Clean Sky Joint Undertaking (CSJU)
Committee of the Regions (CoR)
Community Plant Variety Office (CPVO)
Consumers, Health and Food Executive Agency (CHAFEA)
Council of the European Union
Court of Justice of the European Union (CJEU)
ECSEL Joint Undertaking (ECSEL)
eu-LISA
European Agency for Safety and Health at Work (EU-OSHA)
European Anti-Fraud Office (OLAF)
European Asylum Support Office (EASO)
European Aviation Safety Agency (EASA)
European Banking Authority (EBA)
European Border and Coast Guard Agency (FRONTEX)
European Central Bank (ECB)
European Centre for Desease Prevention and Control (ECDC)
European Centre for the Development of Vocational Training (Cedefop)
European Chemicals Agency (ECHA)
European Climate, Infrastructure and Environment Executive Agency (CINEA)
European Commission
European Court of Auditors (ECA)
European Data Protection Board (EDPB)
European Data Protection Supervisor (EDPS)
European Defence Agency (EDA)
European Economic and Social Committee (EESC)
European Education and Culture Executive Agency (EACEA)
European Environment Agency (EEA)
European External Action Service (EEAS)
European Fisheries Control Agency (EFCA)
European Food Safety Authority (EFSA)
European Foundation for the Improvement of Living and Working Conditions (Eurofound)
European GNSS Agency (GSA)
European Health and Digital Executive Agency (HaDEA)
European Innovation Council and SMEs Executive Agency (EISMEA)
European Institute for Gender Equality (EIGE)
European Institute of Innovation and Technology (EIT)
European Insurance and Occupations Pensions Authority (EIOPA)
European Investment Bank (EIB)
European Investment Fund (EIF)
European Labour Authority (ELA)
European Maritime Safety Agency (EMSA)
European Medicines Agency (EMA)
European Ombudsman (Ombudsman)
European Parliament
European Personnel Selection Office (EPSO)
European Police College (CEPOL)
European Police Office (EUROPOL)
European Public Prosecutor's Office (EPPO)
European Research Council Executive Agency (ERCEA)
European Research Executive Agency (REA)
European Securities and Markets Authority (ESMA)
European Systemic Risk Board (ESRB)
European Training Foundation (ETF)
European Union Agency for Fundamental Rights (FRA)
European Union Agency for Network and Information Security (ENISA)
European Union Agency for Railways (ERA)
European Union Drugs Agency
European Union Institute for Security Studies (EUISS)
European Union Intellectual Property Office (EUIPO)
European Union Satellite Centre (EUSC)
Fuel Cells & Hydrogen Joint Undertaking (FCHJU)
Fusion for Energy (F4E)
Innovative Medicines Initiative Joint Undertaking (IMI JU)
Joint Research Centre (JRC)
Office for Harmonisation in the Internal Market (OHIM)
Other
SESAR Joint Undertaking (SESAR JU)
Single Resolution Board (SRB)
The European Union's Judicial Cooperation Unit (EUROJUST)
Translation Centre for the Bodies of the European Union (CdT)