The transfer of personal data outside of the EU is only allowed under certain conditions as set out in Directive 95/46/EC and also in the General Data Protection Regulation which will be fully applicable as of May 2018. If a country is deemed by the European Commission to offer an adequate level of protection, it will be subject to the same rules as an EU Member State, which means that the recipient of the data in that state will not be obliged to take specific measures to allow for the transfer. Transferring data to a country without an adequacy decision requires appropriate safeguards, such as standard contractual clauses or binding corporate rules. Derogations to this rule can be obtained in very specific cases. The European Data Protection Board, of which the EDPS is a member, will provide the Commission with Opinions on this subject.
EDPS Opinion on International Data Transfers by Frontex in the Context of Return Operations
In our November newsletter, find out about our upcoming data protection conference in 2022; read up on our participation in the 43rd Global Privacy Assembly and other events relating to data protection; catch up on our latest Formal Comments and recent publications.
In our October newsletter, discover our new initiative, TechSonar, and rediscover our award-winning TechDispath reports! Read up on our latest Formal Comments, and our Guidelines for EU institutions' return to the workplace, and more!
EDPS Decision authorising temporarily the use of ad hoc contractual clauses between the Court of Justice of the EU and Cisco for transfers of personal data in the Court's use of Cisco Webex and related services
This EDPS Opinion relates to the possible use of a derogation under Article 50 of Regulation (EU) 2018/1725 by the European Union Agency for Cybersecurity (ENISA) for transfers to a third country resulting from the use of a newsletter service to which interested parties can subscribe on ENISA's website