Adequate Jurisdictions

To ensure the protection of Personal Data that is transferred out of ADGM, our data protection regime follows the European Commission approach of designating jurisdictions that are deemed adequate from a data privacy and protection perspective.

As per the ADGM Data Protection Regulations 2021, the transfer of Personal Data to a recipient located in a jurisdiction outside ADGM may take place only if an adequate level of protection for the specific Personal Data are ensured by the laws applicable to the recipient.

The table below sets out the jurisdictions designated as having an adequate level of protection.

 

Region / Designated Jurisdiction

Asia

Japan

Europe

Andorra

Austria

Belgium

Bulgaria

Cyprus

Czech Republic

Croatia  Estonia

Denmark

Finland

Faeroe Islands

Germany

France

Guernsey

Greece

Iceland

Hungary

Isle of Man

Ireland

Jersey

Italy

Liechtenstein

Latvia

Luxembourg

Lithuania

Netherlands

Malta

Poland

Norway

Romania

Portugal

Slovenia

Slovakia

Sweden

Spain

United Kingdom

Switzerland

 

Oceania

Middle East

New Zealand

Dubai International Financial Centre

South America

Israel

Argentina

North America

Uruguay

*Canada


* Provided the recipient is subject to the Canadian Personal Information Protection and Electronic Documents Act (PIPED Act).

Transfers to jurisdictions not listed in the table above may only take place if one of the safeguards set out under Article 42 of the ADGM Data Protection Regulations 2021 is in place or a derogation can be relied upon. 

 

 

If you have questions or need any assistance, we're here to help

service