Personal data • Monegasque list of countries, territories and international organisations offering an adequate level of protection (Ministerial Order No. 2026-548 of 30 September 2026)

Ministerial Order No. 2026-548 of 30 September 2026 (JDM No. 8821 of 16 October 2026) sets out the list of countries, territories and international organisations offering an adequate level of protection, pursuant to Article 97 of Law No. 1.565 of 3 December 2024 on the protection of personal data.

Adopted after the Opinion of the Personal Data Protection Authority (APDP) (Decision No. 2026-07 of 20 May 2026), this list, published in the Journal de Monaco and on the APDP website, is regularly updated.

Implications for international transfers of personal data

• Personal data may be transferred from Monaco to a country outside Monaco without additional safeguards if the country, territory or international organisation to which the transfer is made appears on Monaco’s adequacy list.
• The transfer of personal data to a country, territory or international organisation not included on Monaco’s adequacy list may take place on the basis of appropriate safeguards previously approved by the APDP (pending), or on the basis of consent, or on the basis of certain listed grounds, or on the basis of specific safeguards or specific contractual clauses relating to prior authorisation from the APDP.

Comparison of the Monaco and EU equivalence lists, which are not identical

• The Member States of the European Union (EU), which are deemed to have legislation or regulations providing an adequate level of protection within the meaning of Article 97 of Law No. 1.565 of 3 December 2024), and the three other countries of the European Economic Area (EEA) (Iceland, Liechtenstein and Norway) appear on Monaco adequacy list. EEA members apply the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and therefore do not require an adequacy decision from the European Commission.
• Countries and territories outside the EU/EEA and international organisation appearing on Monaco adequacy list and on the EU list (EU Conformity List):
  - Andorra, Argentina, Brazil, Canada (commercial organisations), Guernsey, the Isle of Man, the Faroe Islands, Jersey, New Zealand, United Kingdom, Switzerland and Uruguay.
  - European Patent Organisation (EPO) (EU Conformity List). The APDP stated that this "was added [to the list] without [its] prior consultation" and that it "did not submit any comments as required by Article 97 of Law No. 1.565" (APDP publication, October 2026).
• Countries not included on Monaco adequacy list but featured on the EU list:
  - Japan, the Republic of Korea (South Korea), Israel, the United States of America (partial adequacy: organisations certified under the EU-US Data Privacy Framework). It should be noted that following the APDP opinion, these four countries were removed from the Government original proposed list.

Monaco adequacy list

Note: an asterisk (*) next to the name of the country or territory indicates that the assessment of the adequacy of the level of protection also covers data transfers carried out in the context of the cooperation provided for by Directive (EU) 2016/680 "Police and Justice" of 27 April 2016.

1/ Countries and territories providing an adequate level of protection as referred to in the first paragraph of Article 97 of Law No. 1.565 of 4 December 2024:

2/ International organisation providing an adequate level of protection as referred to in the first paragraph of Article 97 of Law No. 1.565 of 4 December 2024:

* * *