Читать книгу Privacy and Data Protection based on the GDPR - Leo Besemer - Страница 25

A decision is binding in its entirety. If the addressees are mentioned (e.g. an EU Member State or an individual company), it is only binding on them⁶. It can therefore be an individual instrument. In relation to GDPR Article 45, the European Commission can make an “adequacy decision”, determining that a country or part of a country outside the EU offers an adequate level of data protection. Adequacy decisions will be covered in Part III on cross-border data transfers.