#
Standard GDPR Chapter V transfer toolkit applies uniformly; no NL-specific localisation mandate identified.
Sub-modules (6)
Transfer MechanismsGreen
Transfers rely on Commission adequacy decisions, SCCs, BCRs, or Article 49 derogations, applying directly under GDPR Chapter V.
Claims (1):
- Cross-border transfers of personal data from the Netherlands to third countries rely on the GDPR Chapter V toolkit: European Commission adequacy decisions, Standard Contractual Clauses, Binding Corporate Rules, or Article 49 derogations.
Adequacy ReceivedGreen
As an EU Member State, NL does not receive bilateral adequacy from third countries; it operates within the EU's mutual-recognition (GDPR-internal) framework rather than a receiving-adequacy structure.
Absence provenance: unavailable. Searched: Netherlands adequacy received from third country.
Adequacy GrantedGreen
Adequacy decisions granted to third countries (e.g., the UK) are adopted at EU level by the European Commission and apply automatically in NL; the UK adequacy decisions are currently under an EDPB-reviewed extension process.
Claims (1):
- The EDPB adopted opinions on the European Commission's draft decisions extending the validity of the UK adequacy decisions under the GDPR and the Law Enforcement Directive, an EU-wide determination that applies automatically in the Netherlands as an EU Member State.
Sccs And BcrsAmber
BCR authorisation in NL transitioned from a Ministry of Justice permit system to AP approval under GDPR; legacy permits faced a risk of lapse absent timely AP authorisation.
Claims (1):
- Binding Corporate Rules previously authorised under a Ministry of Justice and Security permit faced a risk of becoming null and void from 25 May 2018 unless the AP issued its own GDPR-era authorisation, as the GDPR Implementation Bill did not expressly address transitional treatment.
Transfer Impact AssessmentAmber
TIA obligations follow the EDPB's general post-Schrems II recommendations, applied by the AP as an EEA authority; no NL-specific TIA methodology beyond EDPB guidance was identified.
Absence provenance: unavailable. Searched: AP transfer impact assessment guidance Netherlands.
Data LocalisationRed
No general data-localisation mandate exists in the Dutch omnibus DP regime.
Absence provenance: unavailable. Searched: Netherlands data localisation requirement GDPR, UAVG data localisation.
No new data since the standing brief. 1 periodic run re-emitted it unchanged.
Sources and claims (3)
- ConfirmedEUR-Lex — Cross-border transfers of personal data from the Netherlands to third countries rely on the GDPR Chapter V toolkit: European Commission adequacy decisions, Standard Contractual Clauses, Binding Corporate Rules, or Article 49 derogations.observed
- ProbableEDPB — The EDPB adopted opinions on the European Commission's draft decisions extending the validity of the UK adequacy decisions under the GDPR and the Law Enforcement Directive, an EU-wide determination that applies automatically in the Netherlands as an EU Member State.observed
- ProbableIAPP — Binding Corporate Rules previously authorised under a Ministry of Justice and Security permit faced a risk of becoming null and void from 25 May 2018 unless the AP issued its own GDPR-era authorisation, as the GDPR Implementation Bill did not expressly address transitional treatment.observed