2.
The adequacy of the level of protection afforded by a third country shall be assessed in the light of all the circumstances surrounding a data transfer operation or set of data transfer operations; particular consideration shall be given to the nature of the data, the purpose and duration of the proposed processing operation or operations, the country of origin and country of final destination, the rules of law, both general and sectoral, in force in the third country in question and the professional rules and security measures which are complied with in that country.
← 1. · All articles · 3. →
Source: EUR-Lex (Cellar) · retrieved 2026-10-09 · Text as adopted (Official Journal); later amendments are not incorporated in this text.