The court stressed that personal data transferred outside the bloc must be "afforded the level of protection essentially equivalent to that guaranteed within the EU.