# Third-Country Adequacy — Assessment and Monitoring Template

## Transfer Details

| Field | Value |
|-------|-------|
| Assessment Date | 14 March 2025 |
| Assessed By | Elisa Brandt, Head of Data Protection, Athena Global Logistics GmbH |
| Destination Country | Japan |
| Data Importer | Athena Logistics Japan KK, 1-2-3 Marunouchi, Chiyoda-ku, Tokyo 100-0005 |

## Adequacy Decision Verification

| Question | Answer |
|----------|--------|
| Does an EC adequacy decision exist? | Yes — Decision (EU) 2019/419 adopted 23 January 2019 |
| Scope | Partial — commercial sector subject to APPI with PPC supplementary rules |
| Is the recipient subject to APPI? | Yes — Athena Logistics Japan KK is a business operator handling personal information under APPI |
| Has the recipient implemented supplementary rules? | Yes — confirmed by annual compliance declaration dated 15 January 2025 |
| Is the recipient in an excluded sector? | No — commercial logistics |
| Adequacy decision in force? | Yes — no suspension or repeal |
| Next periodic review | 2025 (biennial review) |

## Adequacy Coverage Confirmation

| Criterion | Met | Evidence |
|-----------|-----|----------|
| Recipient subject to APPI | Yes | Japanese company registration; APPI applicability confirmed |
| Supplementary rules implemented | Yes | Compliance declaration; internal policies updated |
| Data categories within scope | Yes | Commercial customer and operational data |
| No excluded sector | Yes | Logistics sector; not intelligence or national security |

## Transfer Register Entry

| Field | Value |
|-------|-------|
| Transfer Reference | ADQ-2025-JP-001 |
| Transfer Mechanism | EU adequacy decision — Decision (EU) 2019/419 |
| Scope Verification | Confirmed — recipient subject to APPI with supplementary rules |
| Backup Mechanism | SCCs Module 1 (executed 2024, held in reserve) |
| Next Review | December 2025 (aligned with biennial review cycle) |

## Monitoring Schedule

| Action | Due Date | Owner |
|--------|----------|-------|
| Monitor EC biennial review outcome | December 2025 | DPO Office |
| Verify recipient supplementary rules compliance | January 2026 | Privacy Counsel |
| Check for APPI legislative amendments | Quarterly | Privacy Counsel |
| Verify backup SCC validity | Annual | DPO Office |

## Adequacy Decision Portfolio (All Active Transfers)

| Destination | Decision | Scope | Transfers | Backup | Review Due |
|------------|----------|-------|-----------|--------|-----------|
| Japan | 2019/419 | Partial (APPI) | 2 | SCCs Module 1 | Dec 2025 |
| United Kingdom | 2021/1772 | Full | 5 | SCCs Module 1/2 | Jun 2025 (sunset) |
| Switzerland | 2000/518/EC | Full | 1 | None needed | Dec 2026 |
| United States (DPF) | 2023/1795 | Partial (DPF) | 3 | SCCs Module 2 | Oct 2025 |
| South Korea | 2022/254 | Partial (PIPA) | 1 | SCCs Module 2 | Dec 2026 |

## Priority Actions

| Priority | Action | Deadline |
|----------|--------|----------|
| Critical | UK adequacy sunset approaching June 2025 — verify renewal status; activate backup SCCs if not renewed | May 2025 |
| High | DPF annual review October 2025 — monitor outcome; maintain backup SCCs | October 2025 |
| Medium | Japan biennial review — monitor outcome | December 2025 |