EUGDPRTransfersEASYFree question
An adequacy decision under Article 45 means:
- A.The European Commission has decided that a third country provides an adequate level of data protection
- B.The data subject has approved the transfer, per Article 45(3), which requires an adequacy decision to be reviewed only once, with no periodic re-assessment
- C.The controller has decided the transfer is adequate, under Article 45(1), which allows the European Commission to delegate adequacy decisions to individual member states
- D.The supervisory authority has audited the receiving country
Why A is correct
Article 45 allows the European Commission to determine that a third country ensures an adequate level of data protection, enabling transfers without additional safeguards.
Know someone studying for GDPR? Send them this one.