Print

Transfers of data

The transfer of personal data outside of the EU is only allowed under certain conditions as set out in Directive 95/46/EC and also in the General Data Protection Regulation which will be fully applicable as of May 2018. If a country is deemed by the European Commission to offer an adequate level of protection, it will be subject to the same rules as an EU Member State, which means that the recipient of the data in that state will not be obliged to take specific measures to allow for the transfer. Transferring data to a country without an adequacy decision requires appropriate safeguards, such as standard contractual clauses or binding corporate rules. Derogations to this rule can be obtained in very specific cases. The European Data Protection Board, of which the EDPS is a member, will provide the Commission with Opinions on this subject.

Filters

27
May
2024

EDPS Formal comments on the draft Commission Delegated Regulation supplementing Regulation (EU) 2023/1114 of the European Parliament and the Council with regard to regulatory technical standards on information to be exchanged between competent authorities

EDPS Formal comments on the draft Commission Delegated Regulation supplementing Regulation (EU) 2023/1114 of the European Parliament and of the Council with regard to regulatory technical standards establishing a template document for cooperation arrangements between competent authorities and supervisory authorities.

Available languages: English
27
May
2024

EDPS Formal comments on draft Commission Delegated Regulation supplementing (EU)2023/1114 of EP & Council on regulatory technical standards creating a template for cooperation arrangements competent authorities & supervisory authorities of third countries

EDPS Formal comments on the draft Commission Delegated Regulation supplementing Regulation (EU) 2023/1114 of the European Parliament and of the Council with regard to regulatory technical standards establishing a template document for cooperation arrangements between competent authorities and supervisory authorities of third countries.

 

Available languages: English
29
Apr
2024

EDPS Opinion 15/2024 on the signing and conclusion of an Agreement between the EU and Canada on the transfer of Passenger Name Record (PNR) data

EDPS Opinion 15/2024 on the signing and conclusion of an Agreement between the EU and Canada on the transfer of Passenger Name Record (PNR) data.

Available languages: English
8
Mar
2024

EDPS decision on the investigation into the European Commission's use of Microsoft 365

On 8 March 2024, the EDPS adopted a decision following its investigation into the European Commission's use of Microsoft 365. In the decision, the EDPS focused on compliance with provisions of Regulation (EU) 2018/1725 related to purpose limitation and international transfers and unauthorised disclosures of personal data (see also press release).

Available languages: English