44.
(1) A transfer of personal data to another country or a relevant international organization is based on an adequacy decision where the Data Commissioner makes a decision that—
(a) the other country or a territory or one or more specified sectors within that other country, or
(b) the international organization, ensures an adequate level of protection of personal data.
(2) The Data Commissioner may publish on its website a list of the countries, territories and specified sectors within that other country
and relevant international organisation for which the Data Commissioner has made a decision that an adequate level of protection is ensured.
