Navigation path

Home

Commission decisions on the adequacy of the protection of personal data in third countries RSS

Overview

The Council and the European Parliament have given the Commission the power to determine, on the basis of Article 25(6) of directive 95/46/EC whether a third country ensures an adequate level of protection by reason of its domestic law or of the international commitments it has entered into. The adoption of a (comitology) Commission decision based on Article 25.6 of the Directive involves:

  • a proposal from the Commission;
  • an opinion by Member States' data protection authorities and the EDPS, in the framework of the Article 29 Working Party;
  • an approval from the "Article 31 Committee", composed of representatives of Member States, under the comitology "examination procedure";
  • the adoption of the decision by the College of Commissioners;
  • at any time, the European Parliament and the Council may request the Commission to maintain, amend or withdraw the adequacy decision on the grounds that it act exceeds the implementing powers provided for in the Directive.

The effect of such a decision is that personal data can flow from the 28 EU countries and three EEA member countries (Norway, Liechtenstein and Iceland) to that third country without any further safeguard being necessary.

The Commission has so far recognized Andorra, Argentina, Australia, Canada (commercial organisations), Switzerland, Faeroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Uruguay and the US Department of Commerce's Safe Harbour Privacy Principles as providing adequate protection.

AD - Andorra

Top

AR - Argentina

Top

AU - Australia

  • Council Decision pdf български (bg)czech (cs)dansk (da)Deutsch (de)eesti (et)ελληνικά (el)español (es)Français (fr)Gaeilge (ga)italiano (it)latviešu (lv)lietuvių (lt)magyar (hu)Malti (mt)Nederlands (nl)polski (pl)português (pt)română (ro)slovenčina (sk)slovenščina (sl)suomi (fi)svenska (sv) 2008/651/CFSP/JHA of 30 June 2008 on the signing, on behalf of the European Union, of an Agreement between the European Union and Australia on the processing and transfer of European Union-sourced passenger name record (PNR) data by air carriers to the Australian Customs Service; OJ L213 of 08/08/2008, p.47-48
  • AGREEMENT pdf български (bg)czech (cs)dansk (da)Deutsch (de)eesti (et)ελληνικά (el)español (es)Français (fr)Gaeilge (ga)italiano (it)latviešu (lv)lietuvių (lt)magyar (hu)Malti (mt)Nederlands (nl)polski (pl)português (pt)română (ro)slovenčina (sk)slovenščina (sl)suomi (fi)svenska (sv) between the European Union and Australia on the processing and transfer of European Union sourced passenger name record (PNR) data by air carriers to the Australian customs service; OJ L213 of 08/08/2008, p.49-57

Top

CA - Canada

  • COMMISSION STAFF WORKING DOCUMENTpdf Choose translations of the previous link  : The application of Commission Decision 2002/2/EC of 20 December 2001 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data provided by the Canadian Personal Information Protection and Electronic Documentation Act
  • COUNCIL DECISIONpdf Choose translations of the previous link  of 18 July 2005 on the conclusion of an Agreement between the European Community and the Government of Canada on the processing of API/PNR data
  • COMMISSION DECISION български (bg)czech (cs)dansk (da)Deutsch (de)eesti (et)ελληνικά (el)español (es)Français (fr)Gaeilge (ga)italiano (it)latviešu (lv)lietuvių (lt)magyar (hu)Malti (mt)Nederlands (nl)polski (pl)português (pt)română (ro)slovenčina (sk)slovenščina (sl)suomi (fi)svenska (sv) of 6 September 2005 on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the Canada Border Services Agency
  • Opinion 1/2005pdf Choose translations of the previous link  on the level of protection ensured in Canada for the transmission of Passenger Name Record and Advance Passenger Information from airlines (19.1.2005)
  • Opinion 3/2004pdf Choose translations of the previous link  on the level of protection ensured in Canada for the transmission of Passenger Name Records and Advanced Passenger Information from airlines (11.2.2004)
  • Frequently Asked Questions Choose translations of the previous link  on the Commission's adequacy finding on the Canadian Personal Information Protection and Electronic Documents Act (March 2002)
  • Commission Decision български (bg)czech (cs)dansk (da)Deutsch (de)eesti (et)ελληνικά (el)español (es)Français (fr)Gaeilge (ga)italiano (it)latviešu (lv)lietuvių (lt)magyar (hu)Malti (mt)Nederlands (nl)polski (pl)português (pt)română (ro)slovenčina (sk)slovenščina (sl)suomi (fi)svenska (sv) 2002/2/EC of 20.12.2001 on the adequate protection of personal data provided by the Canadian Personal Information Protection and Electronic Documents Act - O.J. L 2/13 of 4.1.2002
  • Opinion 2/2001pdf of the Art. 29 Data Protection Working Party

Top

CH - Switzerland

  • Reportpdf Choose translations of the previous link  on the application of Commission Decision 2000/518/EC of 26 July 2000 pursuant to Directive 95/46/EC
  • Commission Decision български (bg)czech (cs)dansk (da)Deutsch (de)eesti (et)ελληνικά (el)español (es)Français (fr)Gaeilge (ga)italiano (it)latviešu (lv)lietuvių (lt)magyar (hu)Malti (mt)Nederlands (nl)polski (pl)português (pt)română (ro)slovenčina (sk)slovenščina (sl)suomi (fi)svenska (sv) 2000/518/EC of 26.7.2000 - O. J. L 215/1 of 25.8.2000
  • Opinion 5/99pdf of the Art. 29 Data Protection Working Party

Top

FO - Faeroe Islands

  • Commission Decision of 5 March 2010 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection provided by the Faeroese Act on processing of personal data (notified under document C(2010) 1130) - OJ L58, 09.03.2010, p.17-19
  • Opinion 9/2007pdf Choose translations of the previous link  of the Art. 29 Data Protection Working Party

Top

GG - Guernsey

Top

IL - State of Israel

  • COMMISSION DECISION pdf български (bg)czech (cs)dansk (da)Deutsch (de)eesti (et)ελληνικά (el)español (es)Français (fr)Gaeilge (ga)italiano (it)latviešu (lv)lietuvių (lt)magyar (hu)Malti (mt)Nederlands (nl)polski (pl)português (pt)română (ro)slovenčina (sk)slovenščina (sl)suomi (fi)svenska (sv) 2011/61/EU of 31 January 2011 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data by the State of Israel with regard to automated processing of personal data (notified under document C(2011) 332), OJ L 27, 1 February 2011, p. 39
  • 2011 Non-legislative acts International agreements български (bg)czech (cs)dansk (da)Deutsch (de)eesti (et)ελληνικά (el)español (es)Français (fr)Gaeilge (ga)italiano (it)latviešu (lv)lietuvių (lt)magyar (hu)Malti (mt)Nederlands (nl)polski (pl)português (pt)română (ro)slovenčina (sk)slovenščina (sl)suomi (fi)svenska (sv)
  • Opinion 6/2009pdf Choose translations of the previous link  on the level of protection of personal data in Israel of the Art. 29 WP

Top

IM - Isle of Man

Top

JE - Jersey

Top

US - United States - Transfer of Air Passenger Name Record (PNR) Data

  • Council Decisionpdf 2007/551/CFSP/JHA of 23 July 2007 on the signing, on behalf of the European Union, of an Agreement between the European Union and the United States of America on the processing and transfer of Passenger Name Record (PNR) data by air carriers to the United States Department of Homeland Security (DHS) (2007 PNR Agreement)
  • Agreementpdf between the European Union and the United States of America on the processing and transfer of Passenger Name Record (PNR) data by air carriers to the United States Department of Homeland Security (DHS) (2007 PNR Agreement)
    Signed in Brussels, 23 July 2007 and in Washington, 26 July 2007
  • Agreementpdf Choose translations of the previous link  between the European Union and the United States of America on the processing and transfer of passenger name record (PNR) data by air carriers to the United States Department of Homeland Security
    Signed in Washington on 19.10.2006
  • Letterpdf Choose translations of the previous link  from the 'US Department of Homeland Security' (PNR interpretations)
  • Replypdf Choose translations of the previous link  by the Council Presidency and the Commission to the letter from the USA's Department of Homeland Security
  • Council decisionpdf Choose translations of the previous link  2006/729/CFSP/JHA
  • Commission Staff Working Paperpdf on the Joint Review of the implementation by the U.S. Bureau of Customs and Border Protection of the Undertakings set out in Commission Decision 2004/535/EC of 14 May 2004 (Redacted version - 2005)
  • European Court of Justice judgmentpdf Choose translations of the previous link  on Passenger Name Records: The court annuls the council decision concerning the conclusion of an agreement between the European Community and the United States of America on the processing and transfer of personal data and the Commission decision on the adequate protection of those data
  • Opinion 8/2004pdf Choose translations of the previous link  on the information for passengers concerning the transfer of PNR data on flights between the European Union and the United States of America (30.9.2004)
  • Agreementpdf Choose translations of the previous link  between the European Community and the United States of America on the processing and transfer of PNR data by air carriers to the United States Department of Homeland Security, Bureau of Customs and Border Protection
    Signed in Washington on 28.5.2004
  • Council Decisionpdf of 17 May 2004 on the conclusion of an Agreement between the European Community and the United States of America on the processing and transfer of PNR data by Air Carriers to the United States Department of Homeland Security, Bureau of Customs and Border Protection (2004/496/EC)
  • Commission Decision of 14 May on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the United States' Bureau of Customs and Border Protection
  • Commission secures guarantees for protecting personal data of transatlantic air passengers (17.5.2004)
  • Opinion 2/2004pdf Choose translations of the previous link  on the Adequate Protection of Personal Data Contained in the PNR of Air Passengers to Be Transferred to the United States' Bureau of Customs and Border Protection (US CBP) (2.2.2004)
  • Letterpdf Choose translations of the previous link  from Commissioner Bolkestein to US Secretary Tom Ridge, Department of Homeland Security, 18.12.2003
  • Communication from the Commission to the Council and the Parliament of 16.12.2003pdf Choose translations of the previous link 
  • Speech by Commissioner Bolkestein of 16.12.2003

Top

NZ - New Zealand

Top

US - United States - Safe Harbor

 

Top

UY - Eastern Republic of Uruguay

 

 

Top

Press releases