Transferring personal data beyond the EEA may create additional risks for individuals, because there might be a lower level of protection in the non-EU/EEA country or international organisation of destination. This may have a negative impact on the individuals’ ability to exercise their data protection rights, in particular to protect themselves from unlawful use or disclosure of their personal data.
For this reason, all international transfers outside of the EEA must comply with the specific rules set out in Chapter V of Regulation (EU) 2018/1725. Further explanation on how to deal with international transfers is available here.
The EDPS authorisation decisions for transfers are available below.
EDPS Decision concerning the transfers of personal data carried out by OLAF through the Investigative Data Consultation Platform pursuant to Article 9(7) of Regulation (EC) No 45/2001