Last review date: 1 January 2025

Yes

Transfers of personal data to third countries are only permissible if there is a legal basis for the processing/transfer and one of the following applies:

☒  approved adequate/whitelisted jurisdictions

☒  to holders of specific certifications or followers of specific code of conduct programs each approved by the relevant data protection and security authority

☒  derogations, such as consent, contract performance, necessity to establish, exercise or defend legal claims

Please see separate question for information on data localization provisions that are not restricted to personal data.