Which of the following countries will continue to enjoy adequacy status under the GDPR, pending any future European Commission decision to the contrary?

Which of the following countries will continue to enjoy adequacy status under the GDPR, pending any future European Commission decision to the contrary?

A. Greece

B. Norway

C. Australia

D. Switzerland

View Answer

Answer: B

Explanation:

Norway is not a member of the European Union (EU) but is a member of the European Economic Area (EEA). The EEA consists of the EU Member States plus Norway, Liechtenstein, and Iceland. These EEA countries have incorporated the GDPR into their national laws, ensuring that the same level of data protection is upheld. Therefore, data transfers between the EU and these EEA countries, including Norway, occur seamlessly without the need for any specific adequacy decision by the European Commission.

A. Greece is an EU Member State, so the concept of adequacy status does not apply. GDPR is directly applicable in Greece as it is in all EU Member States.

C. Australia does not have an adequacy decision under the GDPR as of my last update in January 2022. Data transfers to Australia would need to rely on other GDPR-approved mechanisms unless an adequacy decision is made in the future.

D. Switzerland is not an EU or EEA member but has been recognized as providing an adequate level of data protection. However, the wording of the question implies a country that enjoys adequacy status by default due to its relationship with the EU/EEA, which makes Norway the better answer.