This working paper focuses on adequacy decisions under Article 45 of the GDPR, specifically on implementing acts of the European Commission for assessing data protection levels in third countries and international organizations. It outlines core data protection principles necessary for a third country or international organization to achieve essential equivalence with the EU's data protection framework. The document is structured into four chapters, covering the concept of adequacy, procedural aspects for making adequacy findings, general data protection principles for equivalent protection levels, and essential guarantees for law enforcement and national security access.
Author: European Data Protection Board
Status: Adopted / Published
Adoption date: 2018-02-06
Last updated: 08 Aug 2025
Category: Guidance
Subcategory: Other official document