{"id":12743,"date":"2021-04-22T08:04:42","date_gmt":"2021-04-22T08:04:42","guid":{"rendered":"https:\/\/complior.se\/?p=12743"},"modified":"2026-04-06T12:06:21","modified_gmt":"2026-04-06T10:06:21","slug":"understanding-transfer-mechanisms-in-gdpr","status":"publish","type":"post","link":"https:\/\/complior.se\/en\/understanding-transfer-mechanisms-in-gdpr\/","title":{"rendered":"Understanding transfer mechanisms in GDPR"},"content":{"rendered":"
\n
\n
<\/svg><\/span>Tillbaka till resurser<\/span><\/a><\/div>\n\n\n\nBlog<\/span>\n\n\n\n

Understanding transfer mechanisms in GDPR<\/h1>\n\n\n\n
\r\n\t\r\n\t\t<\/rect>\r\n\t\t<\/line>\r\n\t\t<\/line>\r\n\t\t<\/line>\r\n\t<\/svg>\r\n\t\r\n\t\tApr 22, 2021\t<\/span>\r\n<\/div>\n\n\n

<\/svg><\/span>3 min <\/span><\/h1><\/div>\n<\/div>\n\n\n\n
\"image<\/figure>\n<\/div><\/div>\n\n\n\n
\n
\n

Let\u2019s start with the basics of how you can lawfully transfer personal data from the EEA to the rest of the world. It\u2019s important to note that a transfer of personal data includes both making information accessible to, and actively transferring it to, parties outside of the EEA. Any country outside the EEA is defined as a \u201cthird country\u201d under the GDPR.<\/p>\n\n\n\n

Chapter 5 of the GDPR states that transfers to a third country or international organization are only lawful if one of the specified conditions or transfer mechanisms is met.<\/p>\n<\/div>\n\n\n\n

\n

Adequacy decisions<\/h2>\n\n\n\n

The first transfer mechanism is when the third country, or international organization, ensures an adequate level of data protection. Transfer under this mechanism don’t require any specific authoirization and are based on a formal decision by the European Commision. <\/p>\n\n\n\n

The Commission maintains a list of countries deemed to provide adequate protection. This assessment is based on factors such as rule of law, human rights, and fundamental freedoms. <\/p>\n\n\n\n

As of February 2021, the following were considered adequate:<\/p>\n\n\n\n