scholarly journals Las decisiones de adecuación en el Derecho europeo relativas a las transferencias internacionales de datos y los mecanismos de control aplicados por los estados miembros = Adequacy decisions in European Law related to international data transfers and control mechanisms applied by the member states

2019 ◽  
Vol 11 (1) ◽  
pp. 350
Author(s):  
Juan José Gonzalo Domenech

Resumen: La nueva legislación europea ha traído consigo un régimen sobre transferencias inter­nacionales de datos mucho más desarrollado que la Directiva 95/46/CE, y de ello debemos destacar el nuevo régimen de la decisión de adecuación y la influencia de la STJUE Schrems en dicha redacción. El objetivo de este nuevo régimen es supervisar que todo país, sector u organización internacional de­clarado como “adecuado” lo continúe siendo a lo largo del tiempo, y si no fuera así, tomar medidas para resolver la situación.Palabras clave: decisión de adecuación, RGPD, transferencia internacional de datos, Schrems.Abstract: The new legislation has brought with it a regime on international data transfers that is much more advanced than Directive 95/46/EC, and we must highlight the new regime of the adaptation decision and the influence of RCJEU Schrems in that wording. The objective of this new regime is that the entire country, the sector or international organization declared as “adequate” continue to be so over time, and if not, take measures to fix the situation.Keywords: adequacy decision, GDPR, international data transfer, Schrems.

2021 ◽  
pp. 340-381
Author(s):  
Ulrich Wuermeling ◽  
Isabella Oldani

This chapter studies the regulation of international data transfers in clouds. The General Data Protection Regulation (GDPR) stipulates that any transfer of personal data from the European Union (EU) (as well as other European Economic Area (EEA) countries) to a third country or an international organisation is subject to restrictions to ensure that the level of protection provided by the GDPR is not undermined. The GDPR requires either adequate protection or appropriate safeguards for transfers of personal data to third countries. When assessing a data transfer to a third country, a number of factors must be considered. First, it is necessary to establish whether the processing of personal data falls within the scope of the GDPR. Second, the GDPR may apply either to the cloud provider or its customer, or to both. Third, it is necessary to establish when a 'transfer' of personal data from an EU Member State to a third country is taking place and how the protection of the data can be ensured. Fourth, in some circumstances, there may be an exception to the requirement to ensure continued protection following a data transfer.


Author(s):  
Vicente Guasch Portas

La normativa de la Unión Europea en el campo de la protección de datos es la más exigente del planeta. En cambio hay países con una regulación poco exigente, o incluso sin regulación de ningún tipo. Estas diferencias pueden conducir a que la protección conseguida en el seno de la Unión se pierda en el momento en que los datos puedan ser localizados en naciones con un nivel inferior o completamente nulo de protección. Para evitarlo se han regulado minuciosamente las transferencias internacionales de datos. En este trabajo se pretende dar luz a algunos de los aspectos menos conocidos de los movimientos internacionales de datos personales. Analizamos un documento fundamental del Grupo de Trabajo del artículo 29 de la Directiva 95/46/CE: el WP 12. Revisamos la competencia de la AEPD en cuanto a la evaluación de los Estados que proporcionan un nivel adecuado de protección. Examinamos la necesidad de cumplir con las disposiciones legales en el caso de transferencia internacional. Por último reflexionamos sobre los cambios previstos en la propuesta de Reglamento comunitario de protección de datos.The European Union legislation in the field of data protection is the most demanding in the world. But there are countries with lax regulation, or no regulation of any kind. These differences may lead to the protection achieved within the Union lost in the moment that the data may be located in countries with a lower level of protection or completely invalid. To avoid this we have carefully regulated international data transfers. This paper aims to shed light on some of the lesser known aspects of international flows of personal data. We analyzed a fundamental document of the Working Group of Article 29 of Directive 95/46/EC: the WP 12. We review the jurisdiction of the AEPD regarding the evaluation of states that provide an adequate level of protection. We examined the need to comply with the laws in the case of international transfer. Finally we reflect on the changes envisaged in the proposed EU regulation on data protection.


2021 ◽  
pp. 21-37
Author(s):  
Dan Jerker B. Svantesson

International data transfers are both essential for the modern world and a major source of risksto the protection of personal data. In this, we can speak of a clash between an important multifacetedobjective and the protection of a complex fundamental human right with implicationsgoing far beyond that right itself.The goal must be to facilitate data privacy respecting international data transfers. However,agreement on this goal – even if widespread – does not necessarily signal agreement on how wereach that goal. To make progress, we must proceed with caution and yet avoid getting boggeddown in the unavoidable challenges, such as definitional challenges, we will face.This article canvasses a selection of key considerations that ought to be kept in mind whenwe discuss approaches to international data transfers. However, to prepare ground for that discussion,it first sets the scene by examining the so-called Schrems II decision, its larger contextand background, as well as some of the reactions we have seen to that decision.


Sign in / Sign up

Export Citation Format

Share Document