GDPR Questions About Third Countries
The GDPR allows Personal Data transfers to a third country or international organisation subject to compliance with set conditions, including conditions for onward transfer of the Personal Data. The GDPR allows for data to be transferred to countries whose legal regime is deemed by the European Commission to provide for an “adequate” level of Personal Data protection.
In the absence of an adequacy decision, however, transfers are also allowed outside non-EU states under certain circumstances, such as by use of standard contractual clauses or Binding Corporate Rules (BCRs).
Derogations are also permitted under limited additional circumstances.