Third country
A third country, in the sense of the GDPR, is a country which is not bound by the GDPR - as opposed to the 28 Member States of the EU and the three European Economic Area (EEA) countries Norway, Liechtenstein and Iceland.
Third countries may be recognised through an adequacy decision as offering an adequate level of protection for personal data in order to enable transfers of personal data from the EU and EEA Member States to them.
The effect of such a decision is that personal data can flow from the EU and EEA Member States to that third country (within the limit of the material scope as described by each Decision) without any further requirements.