EU GDPR/Transfers of Personal Data to Third Countries or International Organizations/99 of 107
45.1Appropriate Level of Data Protection Based on Adequacy
Control family: Transfers of Personal Data to Third Countries or International Organizations
Control description
A transfer of personal data to a third country or an international organisation may take place where the Commission has decided that the third country, a territory or one or more specified sectors within that third country, or the international organisation in question ensures an adequate level of protection. Such a transfer shall not require any specific authorisation.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.