Print

Transfers of data

The transfer of personal data outside of the EU is only allowed under certain conditions as set out in Directive 95/46/EC and also in the General Data Protection Regulation which will be fully applicable as of May 2018. If a country is deemed by the European Commission to offer an adequate level of protection, it will be subject to the same rules as an EU Member State, which means that the recipient of the data in that state will not be obliged to take specific measures to allow for the transfer. Transferring data to a country without an adequacy decision requires appropriate safeguards, such as standard contractual clauses or binding corporate rules. Derogations to this rule can be obtained in very specific cases. The European Data Protection Board, of which the EDPS is a member, will provide the Commission with Opinions on this subject.

Filters

20
Aug
2025

EDPS Opinion on the signing and conclusion of the provisional application and conclusion of Protocol (2025-2029) on the implementation of the Fisheries Partnership Agreement of the Democratic Republic of São Tomé and Príncipe and the European Community

EDPS Opinion on the signing and the conclusion of the provisional application and conclusion of the Protocol (2025–2029) on the implementation of the Fisheries Partnership Agreement between the Democratic Republic of São Tomé and Príncipe and the European Community

28
Apr
2025

Formal comments on the draft Commission Implementing Decision on the adequacy of the competent authority of the United Kingdom pursuant to Directive 2006/43/EC of the European Parliament and of the Council

EDPS Formal comments on the draft Commission Implementing Decision on the adequacy of the competent authority of the United Kingdom pursuant to Directive 2006/43/EC of the European Parliament and of the Council.

Available languages: English
23
Apr
2025

Annual Report 2024: acting for the future of data protection

The EDPS Annual Report 2024 is about acting for the future of data protection, preparing for the diverse possibilities and risks that the digital landscape presents. 

Guided by our 2020 - 2024 strategy and its principles: Foresight, Action and Solidarity, the EDPS has: unveiled and taken steps to start executing its Strategy for AI,  monitored and analysed technologies, including AI- led technologies, advised EU-co legislator on upcoming EU regulations directly impacting people’s privacy and data protection, providing tools to EUIs to ensure their compliance with EU data protection laws, influence the development of data protection globally. 

Annual Report (full version)
Available languages: English
Available languages: Bulgarian, Czech, Danish, German, Estonian, Greek, English, Spanish, French, Irish, Croatian, Italian, Latvian, Lithuanian, Hungarian, Maltese, Dutch, Polish, Portuguese, Romanian, Slovak, Slovenian, Finnish, Swedish
19
Nov
2024

Global Privacy Assembly 2024 - Jersey

The 46th edition of the Global Privacy Assembly Annual Meeting took place this year in Jersey from October 28th through 1 st November.

All reports and resolutions can be found here.

Following you can find the adopted resolutions during this year's GPA:
 

Resolution Endorsing and Encouraging the Use of Data Protection Certification Mechanisms
Available languages: English
Resolution on principles regarding the processing of personal information in neuroscience and neurotechnology
Available languages: English
Resolution on Data Free Flow with Trust and an effective regulation of global data flows
Available languages: English
Resolution on the GPA Rules & Procedures
Available languages: English