International data transfers | Data protection guide for small business

Quoted on this wiki

Every place a page here uses this source, in the order the words come in it.

1. The GDPR does not provide a definition of such transfers. However, the EDPB has identified the following three cumulative criteria to identify a transfer outside the EEA: “a controller or a processor is subject to the GDPR for the given processing;” this controller or processor discloses by transmission or otherwise makes personal data available to another organisation (data controller or processor);

   In GDPR territorial scope

2. Transfers of personal data to countries outside of the European Economic Area (EEA) are often essential in view of international trade or cooperation. Your SME may have to transfer personal data to a country outside the EEA in the course of its activities, for example, when you need to share personal data with your business partners or with your suppliers who are based outside the EEA. “The GDPR contains specific provisions for such transfers.” When does a transfer of personal data outside the EEA occur?

   In Third-country data transfers

3. Transfers of personal data to countries outside of the European Economic Area (EEA) are often essential in view of international trade or cooperation. Your SME may have to transfer personal data to a country outside the EEA in the course of its activities, for example, when you need to share personal data with your business partners or with your suppliers who are based outside the EEA. “With these provisions, the GDPR aims to guarantee an equivalent level of protection to personal data being transferred to the one they enjoy within the EEA.” When does a transfer of personal data outside the EEA occur?

   In Third-country data transfers

4. When does a transfer of personal data outside the EEA occur? “However, the EDPB has identified the following three cumulative criteria to identify a transfer outside the EEA:” a controller or a processor is subject to the GDPR for the given processing;

   In Third-country data transfers

5. The GDPR does not provide a definition of such transfers. However, the EDPB has identified the following three cumulative criteria to identify a transfer outside the EEA: “a controller or a processor is subject to the GDPR for the given processing;” this controller or processor discloses by transmission or otherwise makes personal data available to another organisation (data controller or processor);

   In Third-country data transfers

6. a controller or a processor is subject to the GDPR for the given processing; “this controller or processor discloses by transmission or otherwise makes personal data available to another organisation (data controller or processor);” this other organisation is in a country outside EEA or is an international organisation.

   In Third-country data transfers