There is currently neither an adequacy decision pursuant to Art. 45 (1, 3) GDPR, nor appropriate safeguards in line with Art. 46 (2, 3) GDPR, for the country to which the data is being transferred. This means that the European Commission has not yet determined that the country-specific level of data protection offered by the country corresponds to the level of data protection provided in the European Union. Similarly, there are no ‘standard contractual clauses’ as ‘appropriate safeguards’ pursuant to Art. 46 (2, 3) GDPR for transfer to the third country or to the international organisation(s). Possible risks that cannot be ruled out at present in connection with the aforementioned transfer include the following in particular: