Schedule 21, Part 3, paragraph 9(7)

In this paragraph— “adequacy decision” means a decision made on the basis of— Article 45(3) of the EU GDPR, or Article 25(6) of Directive 95/46/EC of the European Parliament and of the Council of 24th October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data; “binding corporate rules” has the meaning given in Article 4(20) of the UK GDPR.

← 6 · All articles · 8 →

Source: legislation.gov.uk · retrieved 2026-09-04