Commission finds that EU personal data flows can continue with 11 third countries and territories
Today, the European Commission successfully concluded its review of 11 existing adequacy decisions. These decisions had been adopted under the EU data protection legislation that preceded the General Data Protection Regulation (GDPR). In its report, the Commission finds that personal data transferred from the European Union to Andorra, Argentina, Canada, Faroe Islands, Guernsey, the Isle of Man, Israel, Jersey, New Zealand, Switzerland and Uruguay, continues to benefit from adequate data protection safeguards. Therefore, the adequacy decisions adopted for these 11 countries and territories remain in place and data can continue to flow freely to these jurisdictions. The review has demonstrated that the data protection frameworks in these countries and territories have further converged with the EU’s framework and strengthened protection of personal data in their jurisdictions. The GDPR has inspired positive chan
ges such as the introduction of new rights for individuals, the reinforcement of the independence and powers of authorities responsible for the enforcement of privacy laws or the modernisation of rules on international transfers.
The country reports show that since the adoption of the adequacy decisions under the 1995 Data Protection Directive, the different countries and territories have carried out a comprehensive modernisation of their privacy legislation. They have further aligned their frameworks with the GDPR or introduced specific reforms, which significantly strengthened safeguards for personal data. These reforms reinforced, for example, the independence and enforcement powers of data protection authorities. To bridge certain gaps with the EU privacy framework, some countries put in place specific safeguards to strengthen the protection of data coming from the European Economic Area, including to facilitate the exercise by Europeans of their rights. The review also showed that public authorities in
the 11 jurisdictions are subject to appropriate safeguards in the area of access to data by public authorities, notably for law enforcement or national security purposes. This includes effective oversight and redress mechanisms.
The Commission will continue to monitor relevant developments in the countries and territories concerned, in particular, where further legislative reforms are ongoing. The GDPR requires the Commission to periodically review adequacy decisions.
Background
With the entry into application of the GDPR in May 2018, the adequacy decisions adopted under the Data Protection Directive remained in force. At the same time, the GDPR clarifies that adequacy decisions are ‘living instruments’ and requires the Commission to periodically review these decisions.
When carrying out its first review, the Commission evaluated the developments in the countries and territories’ data protection frameworks since the adoption of the adequacy decisions, and also assessed the rules in place on government acc
ess to data for law enforcement and national security purposes.
In the event of developments in an adequate country or territory that would negatively affect the level of protection for personal data, the Commission has the power to suspend, amend or withdraw an adequacy decision.
In total there are 16 adequacy decisions in place, respectively for Andorra, Argentina, Canada (commercial organisations), Faroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, New Zealand, Republic of Korea, Switzerland, the United Kingdom (under the GDPR and the LED) , the United States (for commercial organisations certified under the EU-US Data Privacy Framework) and Uruguay.
In 2019, the EU and Japan recognised each other’s data protection systems as ‘equivalent’, thereby allowing personal data to flow freely between them. This arrangement created the world’s largest area of free and safe data flows. In June 2023, the EU adopted adequacy decisions for the United Kingdom and in January 2022 for South Korea. In July 202
3, the Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework.
A first review of the arrangement with Japan was concluded with the adoption of a report in April 2023 and the Commission also monitors the enforcement of the arrangements that are in place with the United Kingdom and the United States.
For more information
Data protection adequacy for non-EU countries (europa.eu)
Data protection in the EU (europa.eu)
Report on adequacy decisions adopted under the Data Protection Directive
Quote(s)
The adequacy decisions have laid the foundation for cooperation and convergence between the EU and like-minded partners. Together we focus on a human-centric and democratic development of the digital economy, where personal data can flow freely and safely.
Vera Jourová, Vice-President for Values and Transparency
In today’s world, cross-border data flows are an integral part of our economy and daily lives. I very much welcome that all 11 countries and territories concerned by this review
have brought their data protection regimes even closer to ours. Our adequacy decisions form the world’s broadest network of safe and free data flows. We will step up our engagement with international partners to develop this network even further.
Didier Reynders, Commissioner for Justice
Commission disburses final tranche of REPowerEU pre-financing payment to Hungary under the Recovery and Resilience Facility
Today, the Commission disbursed pound 140.1 million to Hungary in grants as part of pre-financing relating to the REPowerEU funds under the Recovery and Resilience Facility (RRF). This second and final tranche of REPowerEU pre-financing comes in addition to the first REPowerEU pre-financing of pound 779.5 million disbursed to Hungary on 28 December.
These advance payments will help to kick-start the implementation of the crucial investment and reform measures outlined in each REPowerEU chapter. This will accelerate the delivery on the REPowerEU Plan’s objectives to save energy, produce clean energy a
nd diversify energy supplies, with a view to making Europe independent from Russian fossil fuels in light of Russia’s invasion of Ukraine.
No disbursements following a payment request to Hungary can take place as long as the 27 ‘super-milestones’ have not been satisfactorily implemented. Any prefinancing amounts paid to a Member State will be netted from future regular payment requests. In addition, the Commission will recover any pre-financing amounts that might not have been netted against regular payment requests by the end of the RRF lifetime.
Today’s disbursement of pre-financing follows the Council’s approval of Hungary’s revised plan, which includes a REPowerEU chapter, and the signature of a financial agreement.
Pre-financing payments, paid out in either one or two steps, are equivalent to up to 20% of the additional funds requested to finance each country’s REPowerEU chapter.
More information on the measures included in the REPowerEU chapters can be found for Hungary here. The Council has approve
d all 23 REPowerEU chapters that have been submitted so far. For more information on REPowerEU and the link with the overall RRF, please consult this Q and A.
(For more information: Veerle Nuyts – Tel.: + 32 229-96302; Marajke Slomka – Tel.: +32 229-82613)
Over 3,000 Ukrainian patients transferred to European hospitals since the start of the war
The EU has been coordinating regular medical evacuations of Ukrainian patients, be they chronically ill or injured since the beginning of Russia’s war on the country. As of today, more than 3,000 Ukrainian patients have been transferred to receive specialised care in hospitals across Europe via the EU Civil Protection Mechanism. Launched in March 2022, it is the largest medical evacuation operation coordinated by the European Commission’s Emergency Response Coordination Centre to date.
The patients have been transferred for treatment to hospitals in 22 European countries: Austria, Belgium, Croatia, Czech Republic, Denmark, Estonia, Finland, France, Germany, Hungar
y, Ireland, Italy, Lithuania, Luxembourg, the Netherlands, Norway, Poland, Portugal, Romania, Slovenia, Spain, and Sweden.
The evacuations are further supported by the EU Medevac Hub in Rzeszów, Poland where patients receive 24/7 nursing care. The hub serves as a transfer centre for patients who have been transported from Ukraine to Poland by land, and who from the hub will be airlifted to hospitals across Europe.
Commissioner for Crisis Management Janez Lenarcic said: ‘We cannot turn our eyes away from the horrors Ukrainian people are forced to face day by day. As Russia continues its ruthless attacks on Ukraine’s civilian infrastructure, including hospitals, providing emergency assistance to Ukraine is as crucial as ever. Today we mark a milestone of transferring more than 3,000 Ukrainian patients to hospitals across Europe. I express my gratitude to all 22 countries who have opened their hospitals to patients in need of treatment. Together, we are saving lives.’
Commissioner for Health and Food Safety S
tella Kyriakides said: ‘As of today, 3,000 Ukrainian patients in urgent need of medical treatment have been successfully transferred to hospitals across Europe thanks to the generosity, solidarity and cooperation of 22 countries through the EU’s solidarity mechanisms. As we have always said, Ukraine and its people can count on the EU’s support for as long as necessary.’
(For more information: Balazs Ujvari – Tel.: +32 2 295 45 78; Daniel Puglisi – Tel.: +32 2 296 91 40)·
Calendar from Monday 15 to Sunday 21 January 2024
World Economic Forum in Davos, Switzerland
President von der Leyen, Mr Valdis Dombrovskis, Mr Maroš Šefcovic, Ms Vera Jourová, Ms Dubravka Šuica, Mr Paolo Gentiloni, Ms Stella Kyriakides, Ms Kadri Simson, Ms Iliana Ivanova, and Mr Wopke Hoekstra will be participating in the event.
Monday January 15, 2024
Mr Margaritis Schinas travels to Astana, Kazakhstan; travels to Bishkek, Kyrgyzstan.
Tuesday January 16, 2024
Mr Margaritis Schinas travels to Dushanbe, Tajikistan; travels to Tashkent
, Uzbekistan.
Ms Stella Kyriakides in Davos, Switzerland – at World Economic Forum: delivers a speech at the panel discussion ‘Bad Bugs, No Drugs: Facing a World without Antibiotics’; meets with Ms Camilla Sylvest, Executive Vice-President of Novo Nordisk.
Wednesday January 17, 2024
College Meeting in Strasbourg
President Ursula von der Leyen in Strasbourg: participates in the EP plenary debate on the conclusions of the European Council meeting of 14-15 December 2023.
Mr Margaritis Schinas travels to Tashkent, Uzbekistan; travels to Ashgabat, Turkmenistan.
Ms Stella Kyriakides in Davos, meets with Mr Stephane Bancel, CEO of Moderna; meets with Mr Roy Papatheodorou, SANOFI Executive Vice President and General Counsel.
Thursday January 18, 2024
Mr Margaritis Schinas receives religious leaders for a high-level meeting.
Friday January 19, 2024
Mr Margaritis Schinas participates in the Brussels Cybersecurity Summit.
Ms Stella Kyriakides holds a videoconference with the Spanish Coalition of Experts on me
tastatic triple negative breast cancer; holds a videoconference with representatives of the International Association of Mutual Benefits Societies; delivers remarks via videoconference at the Centenary event for the World Organization for Animal Health, organized by the Belgian Presidency; participates in the signing of Montenegro’s association agreement to EU4Health with Mr Vojislav Šimun, Minister for Health of Montenegro.
The European Commission is committed to personal data protection. Any personal data is processed in line with Regulation (EC) 2018/1725. All personal information processed by the Directorate-General for Communication / European Commission Representations is treated accordingly. If you do not work for a media organisation, you are welcome to contact the EU through Europe Direct in writing or by calling 00 800 6 7 8 9 10 11.
Source: Cyprus News Agency