Last review date: 31 December 2024

Transfers of personal data to third countries are permissible only if there is a legal basis for the processing/transfer and one of the following applies:

☒         approved adequate/whitelisted jurisdictions

☒         to holders of specific certifications or followers of specific code of conduct programs each approved by the relevant data protection and security authority

☒         approved standard contractual clauses

☒         binding corporate rules

Please see separate question for information on data localization provisions that are not restricted to personal data.