When assessing adequacy, the European Commission considers:
- A.Only the country's GDP, under Article 65, which gives the European Data Protection Board an advisory role only and no power to adopt a binding decision
- B.The rule of law, respect for human rights, relevant legislation, data protection rules, and the existence of an independent supervisory authority
- C.Only trade agreements, under Article 45(3), which makes an adequacy decision permanent and removes the Commission's power to review, amend or repeal it
- D.Only the number of data protection laws
Why B is correct
Article 45(2) lists factors including rule of law, human rights, legislation, supervisory authorities, and international commitments the country has entered into.
Know someone studying for GDPR? Send them this one.