The European Commission completed its GDPR adequacy review of the 11 countries previously deemed adequate under the 1995 Data Protection Directive. Those 11 countries may still receive personal data transferred from the EU as their laws are deemed to be substantially equivalent to the GDPR. It is likely that the UK will follow suit and deemed these 11 adequate as well. The 11 adequate countries are Andorra, Argentina, Canada, Faroe Islands, Guernsey, the Isle of Man, Israel, Jersey, New Zealand, Switzerland and Uruguay. The EC's report does not affect the adequacy decisions already made under the GDPR in favour of Japan, South Korea, and the UK or under the EU-US Data Protection Framework. No change rather than all change! The full Commission report is available at commission.europa.eu.
| less than a minute read
11 Retain EU Data Transfer Adequacy
"In today’s world, cross-border data flows are an integral part of our economy and daily lives. I very much welcome that all 11 countries and territories concerned by this review have brought their data protection regimes even closer to ours. Our adequacy decisions form the world’s broadest network of safe and free data flows. We will step up our engagement with international partners to develop this network even further." Didier Reynders, Commissioner for Justice