On 12 November 2020 the Commission of the European Union (EU) published two draft implementing decisions – one containing a draft new set of standard contractual clauses for transfers of personal data from the EU to third countries (the Cross-Border SCCs), and one containing a draft of new standard contractual clauses for certain clauses in controller-processor data processing agreements (DPAs) (pursuant to Article 28(7) GDPR). The Cross-Border SCCs were eagerly awaited by all stakeholders, even moreso after the Court of Justice of the European Union (CJEU) declared invalid the EU-U.S. Privacy Shield in its Schrems II ruling in July 2020. See GT Alert for further information.

Citizens and other stakeholders have until 10 December 2020 to provide feedback on the draft Cross-Border SCCs and on the draft SCCs relating to DPAs. After this date, the relevant committee will vote to accept or reject the draft decision.

Continue reading the full GT Alert, “New Draft Standard Contractual Clauses for Cross-Border Transfers of Personal Data and Controller-Processor Relationships.”

Print:
Email this postTweet this postLike this postShare this post on LinkedIn
Photo of Dr. Viola Bensinger Dr. Viola Bensinger

Viola Bensinger is Global Co-Chair of the firm’s Intellectual Property Practice Group and also chairs the Technology Practice as well as the Litigation Practice in Germany. She advises clients from the technology, media, health care and other industries.

Photo of Gretchen A. Ramos Gretchen A. Ramos

Gretchen A. Ramos is Global Co-Chair of the Data, Privacy & Cybersecurity Practice. Gretchen is a creative problem-solver that various large tech clients rely on to handle their most challenging data protection issues. Clients appreciate not only her legal skills, but also her

Gretchen A. Ramos is Global Co-Chair of the Data, Privacy & Cybersecurity Practice. Gretchen is a creative problem-solver that various large tech clients rely on to handle their most challenging data protection issues. Clients appreciate not only her legal skills, but also her direct, no-nonsense approach in providing advice. She works closely with her clients to manage data and leverage its value in ways to meet compliance obligations, as well as deliver value to the business and instill consumer trust.

Photo of Carsten A. Kociok Carsten A. Kociok

Carsten Kociok focuses his practice on the technology industry. He has broad experience in the areas of Internet, information technology, electronic and mobile payments and new media, as well as regulatory and data protection law issues.

Photo of Darren Abernethy Darren Abernethy

Darren J. Abernethy is an ad tech, data privacy and cybersecurity attorney with more than a decade of experience, including in Am Law private practice in Washington, D.C. and as in-house counsel at startups and a leading privacy technology vendor. He advises clients

Darren J. Abernethy is an ad tech, data privacy and cybersecurity attorney with more than a decade of experience, including in Am Law private practice in Washington, D.C. and as in-house counsel at startups and a leading privacy technology vendor. He advises clients on matters related to digital advertising, privacy law compliance, data breach management, M&A, and FTC best practices.

Photo of Dr. Johanna Hofmann Dr. Johanna Hofmann

Johanna Hofmann advises German and international companies and groupt of companies on all questions of data protection and IT security law. The focus of her work is on the data protection-compliant structuring of existing and future business relationships, both on a national and…

Johanna Hofmann advises German and international companies and groupt of companies on all questions of data protection and IT security law. The focus of her work is on the data protection-compliant structuring of existing and future business relationships, both on a national and international level. Her field of interest lays in particular in the field of cloud computing, data protection certification and data security management. Through long-term secondments at a German group of companies and at the German subsidiary of a US-American technology group, Johanna has gained deep insights into different kinds of group-wide data protection organizations.

Before joining Greenberg Traurig Johanna worked with CMS Hasche Sigle in Munich for over two years. Prior to this, for several years she was a member of the project group for constitutionally compatible technology design and was in charge of an interdisciplinary research project on the dynamic data protection and IT security certification of cloud computing services.