Data transfers outside the Principality: scenarios to consider

Although Law no. 1.565 of December 3, 2024 no longer requires prior authorization from the APDP, except in rare cases, for data transfers to countries, territories or international organizations that do not have a legal framework offering an adequate level of protection, it nevertheless provides for a wide range of legal tools and conditions to govern such transfers.

The principle of no prior formalities for any transfer to a country, territory or international organization with an adequate level of protection remains, but several scenarios are now to be considered successively if the country, territory or international organization concerned is not considered adequate.

To continue reading, you can download the factsheet here