Article 44
General principle for transfers
Regulation
Art. 44 Any transfer of personal data which are undergoing processing or are intended for processing after transfer to a third country or to an international organisation shall take place only if, subject to the other provisions of this Regulation, the conditions laid down in this Chapter are complied with by the controller and processor, including for onward transfers of personal data from the third country or an international organisation to another third country or to another international organisation. All provisions in this Chapter shall be applied in order to ensure that the level of protection of natural persons guaranteed by this Regulation is not undermined. |
Directive
No specific provision |
Poland
In force until May 25, 2018: The Act on Personal Data Protection Art. 47 1. The transfer of personal data to a third country may take place only, if the country of destination ensures adequate level of personal data protection in its territory, 1a. The adequacy of the level of personal data protection referred to in paragraph 1 shall be evaluated taking into account all the circumstances concerning a data transfer operation, in particular the nature of the data, the purpose and duration of the proposed data processing operations, the country of origin and the country of final destination of the data as well as the legal provisions being in force in a given third country and the security measures and professional rules applied in this country. 2. The provision of paragraph 1 above shall not apply if the transfer of personal data results from an obligation imposed on the data controller by legal provisions or by the provisions of any ratified international agreement which guarantee adequate level of data protection. 3. Nevertheless the controller may transfer the personal data to a third country provided that: 1) the data subject has given his/her written consent, 2) the transfer is necessary for the performance of a contract between the data subject and the controller or takes place in response to the data subject's request, 3) the transfer is necessary for the performance of a contract concluded in the interests of the data subject between the controller and another subject, 4) the transfer is necessary or required by reasons of public interests or for the establishment of legal claims, 5) the transfer is necessary in order to protect the vital interests of the data subject, 6) the transfer relates to data which are publicly available. |
Netherlands
Art. 76 WBP 1. Persoonsgegevens die aan een verwerking worden onderworpen of die bestemd zijn om na hun doorgifte te worden verwerkt, worden slechts naar een land buiten de Europese Unie doorgegeven indien, onverminderd de naleving van de wet, dat land een passend beschermingsniveau waarborgt. 2. In afwijking van het eerste lid kunnen persoonsgegevens die aan een verwerking worden onderworpen of die zijn bestemd om na hun doorgifte te worden verwerkt naar een land buiten de Europese Unie worden doorgegeven, indien dat land partij is bij de op 2 mei 1992 te Oporto totstandgekomen Overeenkomst betreffende de Europese Economische Ruimte (Trb. 1992, 132), tenzij uit een besluit van de Commissie van de Europese Gemeenschappen of de Raad van de Europese Unie voortvloeit dat deze doorgifte is beperkt of verboden. 3. Het passend karakter van het beschermingsniveau wordt beoordeeld gelet op de omstandigheden die op de doorgifte van gegevens of op een categorie gegevensdoorgiften van invloed zijn. In het bijzonder wordt rekening gehouden met de aard van de gegevens, met het doeleinde of de doeleinden en met de duur van de voorgenomen verwerking of verwerkingen, het land van herkomst en het land van eindbestemming, de algemene en sectoriële rechtsregels die in het betrokken derde land gelden, alsmede de regels van het beroepsleven en de veiligheidsmaatregelen die in die landen worden nageleefd. __________________________________________________________________________________________________ Section 76 1. Personal data which are undergoing processing or which are intended for processing after transfer may be transferred to a country outside the European Union only if, without prejudice to compliance with the law, that country ensures an adequate level of protection. 2. By way of derogation from subsection 1, the transfer of personal data which are undergoing processing or are intended for processing after transfer to a country outside the European Union may take place if that country is a party to the Agreement on the European Economic Area signed in Oporto on 2 May 1992 (Treaty Series 1992, 132), unless it follows from a decision of the Commission of the European Communities or the Council of the European Union that such transfer is restricted or prohibited. 3. The adequacy of the level of protection will be assessed in the light of all the circumstances surrounding a data transfer operation or set of data transfer operations. Particular consideration will be given to the nature of the data, the purpose(s) and duration of the proposed processing operation or operations, the country of origin and country of final destination, the rules of law, both general and sectoral, in force in the third country in question, and the professional rules and security measures which are complied with in that country. |