Home Law Chapter 2 Transfer of Personal Data to Third Countries under the European Data Protection Law
Chapter
Licensed
Unlicensed Requires Authentication

Chapter 2 Transfer of Personal Data to Third Countries under the European Data Protection Law

Become an author with De Gruyter Brill
Explore this Subject How to publish with us
The Transfer of Personal Data from the European Union to the United Kingdom post-Brexit
This chapter is in the book The Transfer of Personal Data from the European Union to the United Kingdom post-Brexit
Chapter2TransferofPersonal DatatoThirdCountriesundertheEuropean DataProtectionLawTheGDPRallowsfreedataflowwithintheEEA“as an elementof theEuropeanSingle Market,with all member statesboundto the samedata protectionlevel setby the GDPR.”³⁰ThefollowingChapter focuseson transfers of personaldataout-sidetheEU.Thesecross-borderflowsare necessaryfor theexpansionof interna-tionaltradeandinternationalcooperation.³¹However,suchinternationaldataflowshave raisednewchallenges andconcernsabouttheprotectionof personaldata.³²Thetransferof personaldataoutsidetheEU bearstheriskthatthere-spective thirdcountryensuresalowerlevel of dataprotectionthanwithintheEU.Atransferoutside theEU might leadto personaldatalosingtheirhigh Euro-peanlevel of protection.³³TheGDPRaimsto preventtheriskof underminingtheEU’shighprotectionstandard.³⁴Such transfers are regulatedby Chapter VoftheGDPRandmayonlybecarriedout fullycompliantto thoseprovisions.To understandunderwhichcircumstancestheEuropeanlevel of protectionof personaldatais undermined,onemustfirsttakealookat anddefinethe levelof dataprotectionguaranteedwithintheEU as therelevantcomparator.Atfirst,thefollowingfocuseson providingageneral overviewof theprotectionof per-sonaldatain theEU (underA.).In asecondstep,theprovisionsandmandatoryrequirementunderwhich the GDPRpermits the transferof personaldataoutsidetheEU are examined(underB.). Eventually, thefindings of thisChapter providetheessentialbasisfor theassessmentof whetherthetransfersof personaldatafromtheEU to theUKpost-BrexitwouldunderminetheEuropeandataprotec-tionlevel (Chapter 3).ADataProtectionLawin theEUThedataprotectionregimeestablishedin theEU canbe classifiedas“omnibusregime”(“one-size-fits-all”), contraryto theconceptof a“sectorialregime”orWagner(n 4) 320.GDPR,recital101.GDPR,recital101.Wagner(n 4) 320.GDPR,art 44.https://doi.org/10.1515/9783110988253-004
© 2022 Walter de Gruyter GmbH, Berlin/Boston

Chapter2TransferofPersonal DatatoThirdCountriesundertheEuropean DataProtectionLawTheGDPRallowsfreedataflowwithintheEEA“as an elementof theEuropeanSingle Market,with all member statesboundto the samedata protectionlevel setby the GDPR.”³⁰ThefollowingChapter focuseson transfers of personaldataout-sidetheEU.Thesecross-borderflowsare necessaryfor theexpansionof interna-tionaltradeandinternationalcooperation.³¹However,suchinternationaldataflowshave raisednewchallenges andconcernsabouttheprotectionof personaldata.³²Thetransferof personaldataoutsidetheEU bearstheriskthatthere-spective thirdcountryensuresalowerlevel of dataprotectionthanwithintheEU.Atransferoutside theEU might leadto personaldatalosingtheirhigh Euro-peanlevel of protection.³³TheGDPRaimsto preventtheriskof underminingtheEU’shighprotectionstandard.³⁴Such transfers are regulatedby Chapter VoftheGDPRandmayonlybecarriedout fullycompliantto thoseprovisions.To understandunderwhichcircumstancestheEuropeanlevel of protectionof personaldatais undermined,onemustfirsttakealookat anddefinethe levelof dataprotectionguaranteedwithintheEU as therelevantcomparator.Atfirst,thefollowingfocuseson providingageneral overviewof theprotectionof per-sonaldatain theEU (underA.).In asecondstep,theprovisionsandmandatoryrequirementunderwhich the GDPRpermits the transferof personaldataoutsidetheEU are examined(underB.). Eventually, thefindings of thisChapter providetheessentialbasisfor theassessmentof whetherthetransfersof personaldatafromtheEU to theUKpost-BrexitwouldunderminetheEuropeandataprotec-tionlevel (Chapter 3).ADataProtectionLawin theEUThedataprotectionregimeestablishedin theEU canbe classifiedas“omnibusregime”(“one-size-fits-all”), contraryto theconceptof a“sectorialregime”orWagner(n 4) 320.GDPR,recital101.GDPR,recital101.Wagner(n 4) 320.GDPR,art 44.https://doi.org/10.1515/9783110988253-004
© 2022 Walter de Gruyter GmbH, Berlin/Boston

Chapters in this book

  1. Frontmatter I
  2. Foreword and Acknowledgements VII
  3. Contents IX
  4. List of Abbreviations XIX
  5. Chapter 1 Introduction 1
  6. Chapter 2 Transfer of Personal Data to Third Countries under the European Data Protection Law 8
  7. Chapter 3 The Adequacy of the Level of Data Protection in the UK 83
  8. Chapter 4 Alternative Data Transfer Tools 214
  9. Chapter 5 Future Developments 284
  10. Chapter 6 Conclusion 326
  11. Table of Cases 331
  12. Table of Legislation 336
  13. Bibliography 340
Readers are also interested in:
https://doi.org/10.1515/9783110988253-004

Chapters in this book

  1. Frontmatter I
  2. Foreword and Acknowledgements VII
  3. Contents IX
  4. List of Abbreviations XIX
  5. Chapter 1 Introduction 1
  6. Chapter 2 Transfer of Personal Data to Third Countries under the European Data Protection Law 8
  7. Chapter 3 The Adequacy of the Level of Data Protection in the UK 83
  8. Chapter 4 Alternative Data Transfer Tools 214
  9. Chapter 5 Future Developments 284
  10. Chapter 6 Conclusion 326
  11. Table of Cases 331
  12. Table of Legislation 336
  13. Bibliography 340
Sign up now to receive a 20% welcome discount
Institutional Access
How does access work?
Have an idea on how to improve our website?
Please write us.
© 2025 De Gruyter Brill
Downloaded on 21.9.2025 from https://www.degruyterbrill.com/document/doi/10.1515/9783110988253-004/html?licenseType=restricted&srsltid=AfmBOooGX5BxBixC8rVWvwxdBsuz2c0082O-3NaLrSQWD0xFBQ_H6vp9
Scroll to top button