On 19th December 2012, the European Commission formally acknowledged that New Zealand’s data protection standards are compatible with those of the EU and provide adequate protection for the transfer of personal data to that jurisdiction.

The eighth data protection principle provides that personal data shall not be transferred to a country or territory outside the EEA unless that country or territory ensures an adequate level of protection for the rights and freedoms of the data subjects.  The EC publishes a list of countries who provide such a level of protection, providing businesses with legal certainty when wishing to transfer personal data outside the EEA.  A full list of such countries can be found at www.ec.europa.eu/justice/data-protection.