The EDPB took an arguable position on a few aspects regarding data transfers covered by its draft guidelines on the interplay between Article 3 and Chapter V of GDPR.
The final version of the EDPB recommendations on data transfers based on the Schrems II case urges companies to complete their transfer impact assessments.
The European Commission published the new Standard Contractual Clauses on data transfers that have relevant implications and new substantial obligations.
The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have adopted joint opinions on two sets of new standard contractual clauses (SCCs) for transfers of personal data outside the European Economic Area (EEA).
The agreement reached between the EU and the UK on Brexit also addresses the regime for transfers of personal data, with some unexpected developments.ย
The publication of the new standard contractual clauses is a step ahead for data transfers, but considerable new obligations are imposed on businesses.ย
The privacy authority of the German state of Baden-Wรผrttemberg published a guide on data transfers outside the European Economic Area after the decision of the European Court of Justice in the famous Schrems II judgment.
The European Court of Justice held in the Schrems II case that the Privacy Shield is invalidated, but the possibility to rely on standard contractual clauses for data transfers needs to be assessed on a case by case basis.