Legitimising Cross-Border Data Flows by the Self-Assessment Method: Different Approaches throughout Europe
The transfer of personal data to outside the E.U. is problematic for international organizations. Article 25(1) of the Directive 95/46/EC (the Directive) prohibits the transfer of personal data to any country or territory outside the E.U. (a third country) unless the third country 'ensures an adequate level of protection' for the rights and freedoms of those individuals whose personal data is being transferred.