List of third countries identified by the Information Commissioner as having a level of protection of personal data

Prior to transfer to third countries, the person wishing to transfer such data must obtain a decision of the national supervisory authority that the State to which the data are transferred ensures an adequate level of protection of personal data. It is not necessary to obtain such a decision in certain cases laid down by law. This is a current list of countries where the Information Commissioner has determined that they ensure an adequate level of protection of personal data.