Adequacy Decision
What is Adequacy Decision?
A determination by the European Commission that a non-EU country provides an adequate level of data protection. Adequacy decisions enable the free flow of personal data to the third country without additional safeguards.
Terms that appear alongside adequacy decision
Each of these is named in at least one of the same controls as adequacy decision. The number is how many controls name both.
- gdpr 18 shared controls
- consent 15 shared controls
- data protection 12 shared controls
- data subject 12 shared controls
- binding corporate rules 11 shared controls
- standard contractual clauses 10 shared controls
- privacy framework 8 shared controls
- certification 7 shared controls
Frameworks that govern adequacy decision
What the standards actually require on adequacy decision
Requirements naming adequacy decision across 6 standards, quoted from the control text.
Personal data may be transferred to a third country, a territory, one or more specified sectors within a third country, or an international organisation where the Commission has decided that it ensures an adequate level of protection, and such a transfer requi...
GDPR-Art.45 · Transfers on the basis of an adequacy decision →Transfers of personal data to a foreign country or international organisation are subject to the Regulation and the supervision of the Honourable Attorney General of the Federation (HAGF);
nigeria-data-protection-regulation-ndpr::2.11 · Transfer abroad only to jurisdictions with an adequacy decision, under HAGF supervision →Controllers and processors may transfer personal data abroad where an Article 5 or 6 condition is met and the Board has issued an adequacy decision for the country, sectors in it or the international organisation.
turkey-kvkk::9.1-3 · Article 9(1) to (3): transfers abroad on an adequacy decision →A transfer is allowed where the recipient is in a country, territory, sector or international organisation that the Commissioner has decided ensures an adequate level of protection, by a decision published in the Official Gazette.
albania-law-no-124-2024-on-personal-data-protection::40 · Article 40: transfers to destinations with a Commissioner adequacy decision →Standard 8 per Section 27 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall not be transferred outside Jamaica unless adequate protection is provided.
JM-DPA2020-Standard8-Transfers-Outside-Jamaica-Sec27-Adequacy-Decisions-Standard-Contractual-Clauses-BCR-Derogations · Jamaica DPA 2020 Standard 8 - Transfers Outside Jamaica + Section 27 + Adequacy Decisions + Standard Contractual Clauses + Binding Corporate Rules + Derogations + Cross-Border Data Flows + Caribbean Community + International Data Privacy →Any transfer to a third country or international organisation, including onward transfers, may take place only if the controller and processor meet the conditions of Chapter V so that the level of protection is not undermined.
montenegro-law-on-personal-data-protection-2026::45 · Articles 45 and 46: transfers abroad only under Chapter V; adequacy decided by the Government →Questions people ask about adequacy decision
What is Adequacy Decision?
Why is Adequacy Decision important for compliance?
Which compliance frameworks address Adequacy Decision?
Where can I learn more about Adequacy Decision?
See how Adequacy Decision applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.