GDPR principles & rights
International data transfers
GDPRGDPR Chapter V (Arts. 44–50)
Sending personal data outside the European Economic Area is allowed only with safeguards: an adequacy decision, standard contractual clauses, binding corporate rules, or narrow exceptions. It matters whenever an AI vendor processes EU data abroad.