Cross-Border Data Transfer between the gcc Data Protection Laws and the gdpr

This article explores the procedures related to data protection laws in the Gulf Cooperation Council States ( gcc ) and the European Union (EU) regarding the General Data Protection Regulation ( gdpr ). It draws conclusions about the rules governing the transfer of personal information outside of a country. Transfers of personal data to foreign countries or international organizations are discussed, specifically, transfers based on an ‘adequacy’ judgment, or transfers subject to suitable protections. The article also highlights the primary modifications made to safeguard the outbound transmission of personal information in the EU and the gcc states. The article shows that the gcc nations are concerned about protecting citizens and residents’ personal information and that there is room for development in the legislative process regarding the improvement of personal data protection regulations.