Article 12
Code of conduct and certification
- Personal data may be disclosed abroad if a code of conduct or certification guarantees an appropriate level of data protection.
- The code of conduct must be submitted beforehand to the FDPIC for approval.
- The code of conduct or certification must be combined with a binding and enforceable obligation for the controller or the processor in the third State to apply the measures contained therein.