Assessıng The Transfer Of Personal Data In The European Unıon

ASSESSING THE TRANSFER OF PERSONAL DATA IN THE EUROPEAN UNION



Cemil KAYA



I. CHAPTER 1

Basic Inte rnat ional Docu ments

on the Transfer of Personal Dat a

I.1. The OECD Guidelines...7

I.2. The Council of Europe Conventions (108 and 181)...9

I.3. The Data Protection Directive...10

II. CHAPTER 2

Re gulat ing the Transfer of

Personal Data in the Direct ive

II.1. The Concept of Personal Data...16

II.2. The Concept of Transfer...17

II.3. The Transfer of Personal Data within the EU/EEA...19

II.4. The Transfer of Personal Data outside the EU/EEA...21

II.4.1. Application of the Adequacy Principle... 23

II.4.2. The European Commission Findings as to Adequacy

Principle...25

II.4.3. The Criteria for Adequacy Principle... 34

II.4.4. Exemptions from the Adequacy Principle...37

II.4.4.1. Derogations (Article 26/1)...39

II.4.4.2. Contractual Clauses (Article 26(2))...41

II.4.4.3. Binding Corporate Rules (Article 26(2))... 44

Conclusion ...47

Appen dix 1: The Data Protection Directive

(Relevant Parts )...51

Bibliography...61

Index ...69