EU Data Protection Working Party: Israel and Andorra Provide Adequate Protection to Personal Data
The European Union’s Article 29 Data Protection Working Party last month released two separate opinions establishing that Andorra and Israel offer “adequate” levels of protection within the meaning of article 25(6) of Directive 95/46/EC on Personal Data Protection.
While the Working Party opinions are substantial developments, they do not mean that either Andorra or Israel have been declared as providing “adequate” protection to personal data for the purposes of Directive 95/46/EC. The European Commission must decide whether to issue a formal adequacy decision for these countries — taking the Working Party opinions into account, of course.
An adequacy decision would be very important because personal data from Europe can flow freely to those countries that have been declared to provide an adequate level of protection. Parties seeking to transfer data from Europe to countries that do not provide “adequate” protection to personal data need to see if one of the exemptions to the directive apply or pursue or alternatives, such as the use of approved contracts, binding corporate rules or another acceptable means of legitimizing cross-border data transfers.
There are only a very small number of jurisdictions that, to date, have been founds to provide adequate protection to personal data: Argentina; Canada; Switzerland; the United States (but solely with respect to the Safe Harbors program); Guernsey; and the Isle of Man and Jersey.
Comments
Leave a Reply
This website, which may be considered advertising under the ethical rules of certain jurisdictions, is provided with the understanding that it does not constitute the rendering of legal advice or other professional advice. The views expressed on this blog are my personal views alone and do not necessarily reflect views of my employer.




