In a rapidly digitizing world, organizations may receive requests from government agencies in other countries to share personal data. Think of collecting evidence of a crime or verifying financial transactions. The European Data Protection Board (EDPB) has clarified the rules for sharing personal data with government agencies outside the European Economic Area (EEA). The EEA includes all EU countries plus Liechtenstein, Norway and Iceland.
The moment a European organization receives a request from an agency in a country outside the EU, the organization must comply with the General Data Protection Regulation (AVG). The EDPB's new guidelines help organizations determine whether and how to share personal data in such a situation. The guidelines specifically address requests that arise from a court ruling or decision. You can respond to them through Jan. 27, 2025. Following this consultation, the EDPB will adopt the final guidelines.
More information can be found on the website of the Personal Data Authority (AP)(link to other website). The guidelines and the opportunity to respond can be found on the EDPB website (link to other website)..