For a definition of the term ‘international organisation’ see Art. 2 point 23 EPPO-Reg. This term is intended to include Interpol (cf. recital 96).
1. In the absence of an adequacy decision, the EPPO may transfer operational personal data to a third country or an international organisation where:
(a) appropriate safeguards with regard to the protection of operational personal data are provided for in a legally binding instrument; or
(b) the EPPO has assessed all the circumstances surrounding the transfer of operational personal data and concludes that appropriate safeguards exist with regard to the protection of operational personal data.
2. The EPPO shall inform the European Data Protection Supervisor about categories of transfers under point (b) of paragraph 1.
3. When a transfer is based on point (b) of paragraph 1, such a transfer shall be documented and the documentation shall be made available to the European Data Protection Supervisor on request, including the date and time of the transfer, and information about the receiving competent authority, about the justification for the transfer and about the operational personal data transferred.