Posted Friday 4th June 2021
This morning the European Commission issued implementing decisions adopting new GDPR standard contractual clauses (SCCs).
SCCs are one of the most commonly adopted ‘safeguards’ that can be used to allow personal data to be exported from the EU/UK to third countries which do not benefit from an adequacy decision.
The new SCCs have been adopted by the EC in order to plug some long standing gaps (in particular, the lack of processor-to-processor and processor-to-controller SCCs) and to incorporate certain updates following the ‘Schrems II’ CJEU decision made in July 2020.
Within the UK it remains to be seen whether the ICO will follow suit and adopt these new SCCs, particularly since it recently announced that it was drafting its own.
Full details of the decisions can be found on the EC’s webpage.
This article is for reference purposes only. It does not constitute legal advice and should not be relied upon as such. Specific legal advice about your specific circumstances should always be sought separately before taking or deciding not to take any action.