What Is Cross-Border Data Protection Law?

Cross-Border Data Protection Law

A cross-border data protection law involves the safe movement of electronic, personal data around the world. The European Union currently has a cross-border data protection law called the General Data Protection Regulation, which replaces the EU’s Data Protection Directive 95/46/EC.

The regulation addresses the transfer of personal data to locations outside the EU or EEA (European Economic Area). The transfer of citizens’ information to recipients will be generally prohibited unless:

• The jurisdiction in which the recipient is located has an adequate level of data protection
• Data exporters have data-protection safeguards in place
• An exemption exists to the prohibition

Companies, data processors, and cloud service providers must all comply with legally transferring data out of the EEA.