Update on international data protection: new standard contractual clauses for international data transfers

Almost a year ago, the ECJ declared the EU-US Privacy Shield as invalid (Schrems II) and also raised some questions regarding the EU Standard Contractual Clauses (SCC), the most important instrument for international data transfers. The EU Commission has now adopted new SCCs, with which it has adapted the previous SSCs to the General Data Protection Regulation (GDPR) and also taken the ECJ’s specification into consideration. However, it quickly becomes clear that the EU Commission has not created a carte blanche for data exchange with the new SCCs. Companies that transfer personal data to third countries such as the USA on the basis of SCC now have some work to do.

…

To read the full newsletter, please click here.