Transcript

Cross-border data flows are the foundation of the modern global economy and the Internet that connects us. However, when personal data moves across borders, people risk losing important legal protections. The Data Protection Commission of Ireland brought enforcement that unequivocally sets out the steps entities must take to protect personal data before transferring it outside of Europe. These standards have been affirmed in seminal judgments by the Court of Justice of the European Union and by Irish courts. Under European law, personal data can move freely. The countries that are recognized as ensuring a high level of protection. However, to date, just 16 countries have achieved this status. For the rest of the world, European law recognises that transfers can proceed if the entity has provided appropriate safeguards. But what exactly must be done to achieve this standard? The judgments of the Court of Justice of the European Union in Trems 1 and Trems 2 established that the entity must verify a level of protection for fundamental rights that is essentially equivalent to, but not necessarily identical to, that guaranteed within the European Union. In another seminal. Judgment In June 2026, the Irish High Court affirmed that entities making transfers must be able to stand over their verifications. Therefore, the DPCS Inforcements has set out clear standards obliging the entity that designs the transfers to assess the legal order of the third country in light of the technical details of this specific transfers it proposes to make and in light of the specific protections it proposes to implement. This assessment must verify, guarantee and demonstrate the required. Level of protection A gap in this assessment means that the transfers are unlawful and must not proceed. As a result, in our interconnected world, the fundamental rights to data protection and privacy are protected and enforced in practice, and entities can make data transfers with confidence of what they must do to protect personal data.