Under the terms of the European Privacy Directive 95/46EC (and in the UK, the Data Protection Act 1998), European based data controllers are prohibited from transferring personal data outside of the European Economic Area, to associated companies or third parties, unless the non-EEA country adequately protects personal data and the rights of personal data subjects. The only countries, which have …