Companies are allowed to transfer personal data outside the European Economic AreaEEA if they are 1 transferring data to an entity that is within a country that has been recognized by the European Commission as ensuring an adequate level of protection