The EU’s General Data Protection Regulation GDPR confirms the general
principles of the existing Directive on the transfer of personal data to a third country
(in particular the requirement of an “adequate level of protection”). Nevertheless, and
among others, the GDPR:
• harmonises, as a regulation, the national practices which could be dispersed;
• falls in line with a reinforcement of protection following the recognition of personal
data protection as a fundamental right by the Charter; and
• explicitly introduces new instruments of transfer to third countries (in particular,
codes of conduct or certification mechanisms).

EB00000004372K

Available

• Transfers of personal data to third countries