Lawful Transfer of Personal Data Outside the EEA

In plain language

If you use drone services, software, or cloud storage located outside the EEA, you are responsible for making sure that transferring personal data to that country is legally compliant.

Requirement as structured

Drone operators must ensure that any transfer of personal data collected by drones to countries outside the European Economic Area (EEA) is lawful, particularly in the absence of an adequacy decision from the European Commission.

Original regulatory text

In the absence of a decision from the European Commission on the adequacy of the data protection legislation in force in any country outside the EEA, it is your responsibility to ensure that transfer of personal data to these countries is lawful (see: Transfers of Personal Data).