European Commission adopts adequacy decision on Japan.

The European Commission has the power to determine, on the basis of article 45 of GDPR whether a country outside the EU offers an adequate level of data protection. Such security is given either by the country’s domestic legislation or the international commitments it has entered into.