Last review date: 23 December 2024

Yes.

Transfers of personal data to third countries are permissible only, if there is a legal basis for the processing/transfer and one of the following applies:

• approved adequate/whitelisted jurisdictions
• approved standard contractual clauses
• binding corporate rules
• derogations, such as consent, contract performance, necessity to establish, exercise or defend legal claims

Please see separate question for information on data localization provisions that are not restricted to personal data.