Print

International Transfers

Transferring personal data beyond the EEA may create additional risks for individuals, because there might be a lower level of protection in the non-EU/EEA country or international organisation of destination. This may have a negative impact on the individuals’ ability to exercise their data protection rights, in particular to protect themselves from unlawful use or disclosure of their personal data.

For this reason, all international transfers outside of the EEA must comply with the specific rules set out in Chapter V of Regulation (EU) 2018/1725. Further explanation on how to deal with international transfers is available here.

The EDPS authorisation decisions for transfers are available below.

Filters

31
Jul
2024

EDPS Model Administrative Arrangement for transfers of personal data from EUIs to International Organisations

EDPS Model Administrative Arrangement (Model) for transfers of personal data from EU institutions, bodies, offices and agencies (EUIs) to international organisations. 

The Model aims to help EUIs comply with the applicable EU data protection law, Regulation (EU) 2018/1725, when they need to transfer personal data to international organisations, within the remit of their role.

Available languages: English
28
Jun
2024

EDPS Decision the use of the amended administrative arrangement between the SESAR and the Eurocontrol in the context of Eurocontrol’s in-kind contributions to SESAR

EDPS Decision authorising from 1 July 2024 the use of the amended administrative arrangement between the Single European Sky ATM Research 3 Joint Undertaking (‘SESAR’) and the European Organisation for the Safety of Air Navigation (‘Eurocontrol’) in the context of Eurocontrol’s in-kind contributions to SESAR.

Available languages: English
13
Jul
2023

EDPS Decision on the CJEU's use of Cisco Webex video and conferencing tools

In its Decision published on 13 July 2023, the EDPS finds that the use of Cisco Webex videoconferencing and related services by the Court of Justice of the European Union (the Court) meets the data protection standards under Regulation 2018/1725 applicable to EU institutions, bodies, offices and agencies.

Available languages: English
14
Dec
2022

EDPS Decision temporarily authorising the use of the administrative arrangement between the Single European SESAR and Eurocontrol in the context of Eurocontrol’s in-kind contributions to SESAR

EDPS Decision authorising until 30 June 2024 the use of the administrative arrangement between the Single European Sky ATM Research 3 Joint Undertaking (‘SESAR’) and the European Organisation for the Safety of Air Navigation (‘Eurocontrol’) in the context of Eurocontrol’s in-kind contributions to SESAR

28
Oct
2022

Second EDPS Decision temporarily and conditionally authorising contractual clauses between the CJEU and Cisco

Second EDPS Decision temporarily and conditionally authorising the use of contractual clauses between the Court of Justice of the EU and Cisco Systems Inc. US for transfers of personal data in the Court's use of Cisco Webex and related services.

Available languages: English