European Union: Adopted EDPB recommendations on European Commission review of the adequacy of safeguards for data flows to 11 third countries

On 5 December 2024, the European Data Protection Board (EDPB) issued a letter to the European Commission (EC) concerning its review of eleven adequacy decisions adopted under Directive 95/46/EC. The EC's review found that personal data transferred from the EU to Andorra, Argentina, Canada, Faroe Islands, Guernsey, the Isle of Man, Israel, Jersey, New Zealand, Switzerland, and Uruguay had adequate protection safeguards. Consequently, personal data transfers from the Union to these countries or territories can take place without additional requirements. The EPDB's letter acknowledged the detail and transparency of the EC adequacy review and invited it to provide more detailed information in future reviews, including in relation to the respect for the rule of law, access to justice, and human rights norms in third countries.