Anti-fraud investigations and data protection in the EU
Speech given by Giovanni Buttarelli at the European Anti-Fraud Congress, Brussels
The transfer of personal data outside of the EU is only allowed under certain conditions as set out in Directive 95/46/EC and also in the General Data Protection Regulation which will be fully applicable as of May 2018. If a country is deemed by the European Commission to offer an adequate level of protection, it will be subject to the same rules as an EU Member State, which means that the recipient of the data in that state will not be obliged to take specific measures to allow for the transfer. Transferring data to a country without an adequacy decision requires appropriate safeguards, such as standard contractual clauses or binding corporate rules. Derogations to this rule can be obtained in very specific cases. The European Data Protection Board, of which the EDPS is a member, will provide the Commission with Opinions on this subject.
Speech given by Giovanni Buttarelli at the European Anti-Fraud Congress, Brussels
Opinion relating to the prior checking notification concerning the handling of personal data during the different stages of the Single Supervisory Mechanism (SSM) performance feedback process at the European Central Bank (Case 2015-0016)
Concluding remarks of Giovanni Buttarelli, Brussels
The October 2014 edition of the EDPS Newsletter covers the upcoming appointment of a new team of EDPS Supervisors, the EDPS Position Paper on international data transfers and many other EDPS activities.
The transfer of personal data to third countries and international organisations by EU institutions and bodies
[NOTE: This paper was published before December 2018 and is no longer in line with the current data protection Regulation (EU) 2018/1725 as interpreted in the latest case law of the Court of Justice of the European Union]