Commission determination under Article 45 GDPR that a third country provides essentially equivalent data protection, permitting transfers without additional safeguards. Current decisions cover the UK, Switzerland, Japan, South Korea and the US under the EU-US Data Privacy Framework, which remains under legal challenge.