thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Adequacy Decision

European Commission determination that a non-EU country provides essentially equivalent data protection.

Definition

Transfers to adequate countries need no further safeguards. Countries with adequacy include the UK, Japan, Switzerland, South Korea, Canada (commercial), Israel, New Zealand, and the US for organizations certified under the Data Privacy Framework. Adequacy is reviewed periodically and can be invalidated by the CJEU.

Example

An EU company transfers customer data to a processor in Japan relying on adequacy.

Exam tip

For the US, adequacy covers only organizations self-certified under the DPF.

Related terms