ABSTRACT
The Act implements a European Directive which is intended to provide a framework within which personal data may be transferred freely as long as it is protected. The eighth Data Protection Principle provides that personal data may only be transferred within the European Economic Area (EEA) or to countries which have equivalent protection. At the time of writing Hungary and Switzerland have been assessed by the European Commission as having adequate legislation, with Canada under consideration.
