Abstract

The article presents the powers of the General Inspector for Personal Data Protection with respect to international data transfers in the light of the changes to the Personal Data Protection Act of 29 August 1997 introduced by the Business Facilitation Act of 7 September 2014. In particular, it discusses the procedure for GIODO’s permission to transfer personal data to a third country which in its territory does not ensure an adequate personal data protection level, new exemptions from the duty to obtain such permission, and the procedure for approval of binding corporate rules.