CHAPTER 13: MANAGING PERSONAL DATA INTERNATIONALLY

To enforce the Regulation outside the bounds of the EU, the GDPR has a number of elements designed to control how organisations within the EU are able to transfer personal data internationally.

The term “third countries” is not defined in the GDPR but comes from the EU’s primary treaties in order to refer to countries that are not party to those treaties. It is a common term in EU law and is normally taken to refer to any country that is not part of an organisation that is to be held under that law – so, because the GDPR applies as law to the EU and EEA, “third countries” refers to those countries that are not Member States of the EU or EEA. It is not separately defined in the GDPR, but it is ...

Get EU General Data Protection Regulation (GDPR) – An implementation and compliance guide, fourth edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.