Mr. John O'Dwyer:

I will address this first and then hand over to my colleague, Ms Coogan, who is more familiar with the detail. In general, since the European Court of Justice judgment of last July, the European Data Protection Board, EDPB, which we are a member of as the data protection authority in Ireland, has issued some guidance about this. We have issued preliminary guidelines about supplementary safeguards. Those guidelines are now being finalised by the EDPB, having undergone public consultation. Ms Coogan will address the measures that can be put in place to help companies.

I want to be clear that we are talking only about cases where there is not an adequacy decision. If the adequacy position is adopted, there will not be any need for these measures.