Given the different approaches to data protection in third countries, the adequacy assessment should be carried out, and any decision based on Article 25(6) of Directive 95/46/EC should be made and enforced in a way that does not arbitrarily or unjustifiably discriminate against or between third countries where like conditions prevail, nor constitute a disguised barrier to trade, regard being had to the European Union’s present international commitments.

This Act is further complemented by Decree No 414/009 of 31 August 2009, adopted in order to clarify several aspects of the Act and to lay down the detailed regulation of the organisation, powers and functioning of the data protection supervisory authority; The Preamble of the Decree sets out that it is appropriate to adjust the national legal system on this matter to the most accepted comparable legal regime, essentially that established by European countries through Directive 95/46/EC.