150th regulation of the Federal Chancellor, the Datenschutzangemessenheits regulation modifies the DSAV (DSAV Novella 2013)
On the basis of § 12 para 2 of the data protection Act 2000 (DSG 2000), Federal Law Gazette I no. 165/1999, as last amended by the Federal Act Federal Law Gazette I no. 83/2013, is prescribed:
Datenschutzangemessenheits regulation - DSAV, Federal Law Gazette II No. 521/1999, is amended as follows:
1. paragraph 1:
"§ 1 (1) the delivery and provision of data from data applications to recipients in States which are not Member States of the European Union or parties to the agreement on the European economic area (EEA Agreement) (third countries), requires no approval from the data protection Commission, if the transmission or committing to one of the following third-party States or in one of the following, applicable as third countries for the purposes of this regulation" :
1 2. Argentina, 3 Guernsey, Switzerland, 4 Island one, 5 Jersey, 6 Faroe Islands, 7 Andorra, 8 Uruguay, 9 New Zealand.
(2) the delivery and provision of data from data applications to recipients in third countries is required then any approval of the data protection Commission, if the transmission or committing to one of the following States according to the specified conditions:
1 United States of America, according to the decision 2000/520/EC in accordance with the Directive 95/46/EC on the adequacy of the principles of "safe harbor" and the related "frequently asked questions" (FAQ) a legal protection, presented by the Department of Commerce of the United States, OJ No. L 215 of the 25.08.2000 p. 7, as amended by the amending OJ L 115 of the 25.04.2001 p. 14, 2. Canada, according to decision 2002/2/EC of the Commission in accordance with the Directive 95/46/EC on the adequacy of data protection, the the Canadian personal information protection and electronic documents Act, OJ No. L 2 by the 04.01.2002 p. 13, 3. Israel, according to the decision of 2011/61/EC of the Commission in accordance with the Directive 95/46/EC on the adequacy of the level of data protection in the State of Israel in regard to the automated processing of personal data, OJ "No. L 27 of 01.02.2011 S. 39."
2. in article 3, the quote is "§ 13 para 5 DSG 2000" by the quote "section 13 para 4 DSG 2000" replaced.