General Data Protection Regulation (GDPR)

  1. International Data Transfers
    1. General Principle for Transfers
      1. Restrictions on Transfers Outside EEA
        1. Adequate Level of Protection
          1. Transfer Prohibition
          2. Ensuring Adequate Protection
            1. Protection Level Assessment
              1. Continuous Monitoring
            2. Adequacy Decisions
              1. Criteria for Adequacy
                1. Enforcement Mechanisms
                  1. International Commitments
                    1. Rule of Law
                    2. List of Adequate Countries
                      1. Andorra
                        1. Argentina
                          1. Canada
                            1. Faroe Islands
                              1. Guernsey
                                1. Israel
                                  1. Isle of Man
                                    1. Japan
                                      1. Jersey
                                        1. New Zealand
                                          1. Switzerland
                                            1. United Kingdom
                                              1. Uruguay
                                              2. Partial Adequacy Decisions
                                                1. United States
                                                  1. South Korea
                                                  2. Review and Withdrawal
                                                    1. Periodic Reviews
                                                      1. Changed Circumstances
                                                        1. Suspension Procedures
                                                      2. Appropriate Safeguards
                                                        1. Standard Contractual Clauses
                                                          1. Structure and Use
                                                            1. Module Selection
                                                              1. Docking Clauses
                                                                1. Variable Elements
                                                                2. Updates and Requirements
                                                                  1. New SCCs 2021
                                                                    1. Legacy Arrangements
                                                                      1. Transition Periods
                                                                      2. Transfer Impact Assessment
                                                                        1. Local Law Analysis
                                                                          1. Supplementary Measures
                                                                        2. Binding Corporate Rules
                                                                          1. Approval Process
                                                                            1. Consistency Mechanism
                                                                              1. Lead Authority
                                                                                1. Cooperation Procedure
                                                                                2. Scope and Application
                                                                                  1. Group Coverage
                                                                                    1. Processing Activities
                                                                                      1. Third Country Operations
                                                                                      2. Content Requirements
                                                                                        1. Data Protection Principles
                                                                                          1. Data Subject Rights
                                                                                            1. Liability and Enforcement
                                                                                          2. Codes of Conduct and Certification Mechanisms
                                                                                            1. Voluntary Adoption
                                                                                              1. Monitoring and Enforcement
                                                                                                1. International Scope
                                                                                                2. Ad Hoc Contractual Clauses
                                                                                                  1. Authorization Requirements
                                                                                                    1. Adequacy Assessment
                                                                                                    2. Administrative Arrangements
                                                                                                      1. Public Body Arrangements
                                                                                                        1. Enforcement Cooperation
                                                                                                      2. Derogations for Specific Situations
                                                                                                        1. Performance of Contract
                                                                                                          1. Contract with Data Subject
                                                                                                            1. Pre-Contractual Measures
                                                                                                              1. Third Party Contracts
                                                                                                              2. Important Reasons of Public Interest
                                                                                                                1. Public Interest Assessment
                                                                                                                  1. Occasional Transfers
                                                                                                                  2. Protection of Vital Interests
                                                                                                                    1. Life-Threatening Situations
                                                                                                                      1. Physical Integrity
                                                                                                                      2. Public Register Transfers
                                                                                                                        1. General Public Access
                                                                                                                        2. Restrictions on Derogations
                                                                                                                          1. Occasional Nature
                                                                                                                            1. Limited Data Subjects
                                                                                                                              1. Compelling Legitimate Interest

                                                                                                                          Previous

                                                                                                                          5. Obligations of Controllers and Processors

                                                                                                                          Go to top

                                                                                                                          Next

                                                                                                                          7. Enforcement, Remedies, and Penalties