Transfer

Under the GDPR "data transfer is an intentional sending of personal data to another party or making the data accessible by it, where neither sender nor recipient is a data subject" (Article 44 GDPR. General principle for transfers).

The transfer of personal data outside of the EU is only allowed under certain conditions as set out in the GDPR. If a country is deemed by the European Commission to offer an adequate level of protection, it will be subject to the same rules as an EU Member State, which means that the recipient of the data in that state will not be obliged to take specific measures to allow for the transfer. Transferring data to a country without an adequacy decision requires appropriate safeguards, such as Data Sharing Agreements.