Transfers of personal data to third countries outside the EU are only permitted where the conditions laid down in General Data Protection Regulation are met.

In contrast to the current regime where sanctions for breaching transfer restrictions are limited, failure to comply with GDPR’s transfer requirements attract the highest category of fines of up to 20 million Euros or in the case of undertakings up to 4% of annual worldwide turnover.

If you would like to understand the grounds and mechanisms that allow you to transfer personal data to countries that do not offer adequate protection, please do contact us. When it comes to American companies we have more than 15 years of experience in helping them establishing in Europe.