Section 11 of the Data Protection Acts 1988 and 2003 specify conditions that must be met before personal data may be transferred to third countries. Organisations that transfer personal data from Ireland to third countries – i.e. places outside of the European Economic Area (EEA) – will need to ensure that the country in question provides an adequate level of data protection.