Adequacy decision
A European Commission decision that a country outside the EU ensures an adequate level of data protection, so personal data can flow there without further safeguards (GDPR Article 45).
Transfers to a country, territory or sector covered by an adequacy decision need no specific authorisation. The Commission reviews each decision periodically and can amend, suspend or repeal it; the Court of Justice has struck down two decisions for the US, Safe Harbor and the Privacy Shield. Without an adequacy decision, a transfer needs another tool, such as standard contractual clauses or binding corporate rules.
Source: GDPR Art. 45 ↗
Related terms
ClauseTrail watches vendors' subprocessor lists, DPAs, privacy policies, terms and AI terms, and tells your team what changed and by when to object.