Exchanges of data with third countries must respect two fundamental principles: they must ensure that the data can be transferred only to third countries which guarantee an appropriate standard of data protection and that data received from third countries respect fundamental rights.
Datu apmaiņā ar trešām valstīm jāievēro divi pamatprincipi: jānodrošina, ka datu nosūtīšana var notikt tikai uz tām trešām valstīm, kuras garantē pienācīgu datu aizsardzības līmeni, un ka no trešām valstīm saņemtie dati atbilst pamattiesībām.