The transfer of personal data outside of the EU is only allowed under certain conditions as set out in Directive 95/46/EC and also in the General Data Protection Regulation which will be fully applicable as of May 2018. If a country is deemed by the European Commission to offer an adequate level of protection, it will be subject to the same rules as an EU Member State, which means that the recipient of the data in that state will not be obliged to take specific measures to allow for the transfer. Transferring data to a country without an adequacy decision requires appropriate safeguards, such as standard contractual clauses or binding corporate rules. Derogations to this rule can be obtained in very specific cases. The European Data Protection Board, of which the EDPS is a member, will provide the Commission with Opinions on this subject.
Contribution of the EDPS to the consultation on the future EU-US international agreement on personal data protection and information sharing for law enforcement purposes
Opinion on the current negotiations by the European Union of an Anti-Counterfeiting Trade Agreement (ACTA)
Opinion on the Proposal for a Regulation of the European Parliament and of the Council on investigation and prevention of accidents and incidents in civil aviation
Comments of the EDPS on different international agreements, notably the EU-US and EU-AUS PNR agreements, the EU-US TFTP agreement, and the need of a comprehensive approach to international data exchange agreements
Opinion on various legislative proposals imposing certain specific restrictive measures in respect of Somalia, Zimbabwe, the Democratic Republic of Korea and Guinea, OJ C 73, 23.03.2010, p.1