In accordance with Art. 45 of the General Data Protection Regulation (GDPR), the EU Commission can issue so-called adequacy decisions for third countries (and international organisations) in order to simplify the transfer of personal data from the EU/EEA area to these countries or to make it equivalent to that within the EU/EEA area. Such a decision signals that the level of data protection in the country in question is equivalent to that in the EU/EEA. However, the EU Commission must…
Read moreSWISS SUPERVISORY AUTHORITY: EU adequacy decision regarding Switzerland
In its report of 15th January, the European Commission confirmed the adequacy of the Swiss level of data protection. The EU thereby recognises that Switzerland’s legislation continues to provide an adequate level of protection for the processing of personal data. Personal data from a member state of the European Union (EU) or the European Economic Area (EEA) can continue to be transferred to Switzerland without the need for additional guarantees to ensure an adequate level of data protection. Switzerland has…
Read moreBELGIAN SUPERVISORY AUTHORITY: A new adequacy decision for data transfers to the United States
On 10 July, the European Commission approved a new adequacy decision for the United States, the “EU-US Data Privacy Framework”. The AVG (General Data Protection Regulation) provides that when data, subject to the protection of the AVG, is transferred outside the European Union, the level of protection for natural persons guaranteed by the AVG must not be compromised. A transfer of personal data to a third country or an international organisation may take place where the European Commission has determined…
Read moreSUPERVISORY AUTHORITY OF LUXEMBOURG: EUROPEAN COMMISSION ADOPTS NEW ADEQUACY DECISION ON US
On 10 July 2023, the European Commission adopted a new adequacy decision finding that the US guarantees a level of protection of personal data equivalent to that of the European Union. The EU-US Data Protection Framework follows changes made by the United States to its national legislation in order to bring the protection of personal data transferred from the European Union to US organisations to an appropriate level. The bodies that provide the binding guarantees introduced by the new framework…
Read more45 articles found
