On 12 November 2020 the Commission of the European Union (EU) published two draft implementing decisions – one containing a draft new set of standard contractual clauses for transfers of personal data from the EU to third countries (the Cross-Border SCCs), and one containing a draft of new standard contractual clauses for certain clauses in controller-processor data processing agreements (DPAs) (pursuant to Article 28(7) GDPR). The Cross-Border SCCs were eagerly awaited by all stakeholders, even moreso after the Court of Justice of the European Union (CJEU) declared invalid the EU-U.S. Privacy Shield in its Schrems II ruling in July 2020. See GT Alert for further information.
Citizens and other stakeholders have until 10 December 2020 to provide feedback on the draft Cross-Border SCCs and on the draft SCCs relating to DPAs. After this date, the relevant committee will vote to accept or reject the draft decision.
Continue reading the full GT Alert, “New Draft Standard Contractual Clauses for Cross-Border Transfers of Personal Data and Controller-Processor Relationships.”