Adequate Countries
An Adequate Country is a country that the European Commission has determined provides an adequate level of data protection according to the EU's General Data Protection Regulation (GDPR). The GDPR requires that personal data transferred outside of the European Union be protected to the same standards as data within the EU.
List of adequate countries
The EU has determined that the following countries provide an adequate level of data protection:
- Andorra
- Argentina
- Canada (commercial organizations only)
- Faeroe Islands
- Guernsey
- Israel
- Isle of Man
- Japan
- Jersey
- New Zealand
- Switzerland
- Uruguay
Adequate countries are not required to follow the EU's data retention rules or establish a data protection authority, but they must provide the same level of data protection as required by the GDPR. This means that data transfers to adequate countries are subject to the same restrictions as transfers within the EU.
The GDPR requires that personal data be protected against unauthorized access, disclosure, and destruction. Adequate countries must provide mechanisms for ensuring these protections, such as data security safeguards and data breach notification requirements.
Transfers of personal data to adequate countries are subject to the same restrictions as transfers within the EU