Data Protection and Subject Access Policy

27. Appendix EEA Countries

27.1 Article 44 of the General Data Protection Regulation 2016 prohibits the transfer of personal information to countries or territories that do not meet adequacy requirements. GDPR applies to members states of the European Economic Area (EEA).

27.2 Currently the EEA consists of the 26 other European Union member states and 3 additional states. The European Union states are:

• Austria
• Belgium
• Bulgaria
• Cyprus
• The Czech Republic
• Denmark
• Estonia
• Finland
• France
• Germany
• Greece
• Hungary
• Ireland
• Italy
• Latvia
• Lithuania
• Luxembourg
• Malta
• Netherlands
• Poland
• Portugal
• Romania
• Slovakia
• Slovenia
• Spain
• Sweden

27.3 The other EEA states are:

• Iceland
• Liechtenstein
• Norway