A third country is a country which is not bound by the GDPR,i.e. any countryoutside the 28 EU Member States and three EEA countries (Iceland, Liechtenstein and Norway).Third countries may be recognised as offering an adequate level of protection for personal data, in order to enable transfers of personal data from EU and EEA Member States to them. So far, the European Commission has recognised Andorra, Argentina, Canada (only commercial organisations), Faroe Islands, Guernsey, Israel, Isle of Man, Japan Jersey, New Zealand, Switzerland, Uruguay and USA (if the recipient belongs to the Privacy Shield) as providing adequate protection.The effect of such a decision is that personal data can flow from the EU and EEA Member States to that third country (within the limit of the material scope as described by each decision) without any further requirements.