Indeed the EU had to back off from its stringent ban on the cross-border transfer of personal data by issuing a Community Decision on 15 June 2001 to allow the use of standard contractual clauses imposing data protection obligations on the data importer as a way of satisfying the requirements of Articles 25 and 26 of the EU Privacy Directive.