Under the GDPR, which of the following is true in regard to adequacy decisions involving cross-border transfers?
Under the GDPR, which of the following is true in regard to adequacy decisions involving cross-border transfers?
The European Commission can adopt, repeal or amend an existing adequacy decision in relation to cross-border transfers. This means the EC has the authority to continually review and adjust adequacy decisions as necessary based on their ongoing assessments of data protection levels in third countries. Unlike the other options, this directly reflects the power and responsibilities explicitly outlined for the European Commission under the GDPR with respect to international data transfers.
D. To be considered as adequate, third countries must implement the EU General Data Protection Regulation into their national legislation. Adequacy decisions, as defined by the GDPR, involve the European Commission assessing whether a third country, territory, or specified sector within a third country ensures an adequate level of data protection. For an adequacy decision, the third country must provide a level of protection essentially equivalent to that within the EU, taking into account the rule of law, respect for human rights, and relevant legislation.
Best answer is B. Countries do not have to implement GdPR to receive favorable adequacy decisions. The EU can always amend decisions they made about adequacy decisions.