An adequacy decision is a decision by the European Commission that a third country, a territory or a specific sector within a third country or an international organisation provides an adequate level of protection for personal data. This allows the free flow of data between the EU and these countries or organisations without additional data protection safeguards.