1. 43. GDPR, Art. 3(2).
2. 13. OECD, Guidelines on the Protection of Privacy and Transborder Flows of Personal Data (1980, revised 2013), available at (last visited November 19, 2018).
3. 91. GDPR, Recital 113.
4. 83. Privacy Shield Framework, available at (last visited November 19, 2018).
5. 77. GDPR, Recital 61. See also Health Research Authority, “GDPR Guidance,” available at (last visited November 19, 2018).