Compliance

Cross-Border Transfer

The transfer of personal data from one country to another — subject to special rules under the GDPR.

A cross-border transfer (or international data transfer) occurs when personal data is transmitted from one country to another. Under the GDPR, transfers of personal data outside the EU/EEA are subject to specific conditions.

  1. Adequacy decision — the destination country has been deemed adequate by the European Commission
  2. Standard Contractual Clauses — pre-approved contract terms
  3. Binding Corporate Rules — for intra-group transfers
  4. Derogations — explicit consent, contract necessity, public interest (used sparingly)

GDPR Chapter V (Articles 44–49).

Related Terms

GDPRLegal

The General Data Protection Regulation — the EU's comprehensive data protection law, effective since May 2018.

Standard Contractual ClausesLegal

Pre-approved contract terms for transferring personal data from the EU to countries without an adequacy decision.

Adequacy DecisionLegal

A determination by the European Commission that a non-EU country provides an adequate level of data protection.

Binding Corporate RulesLegal

Internal data protection policies approved by a supervisory authority for multinational corporations to transfer data within their group.

Cookie Policy