The following is part of Greenberg Traurig’s ongoing series analyzing cross-border data transfers in light of the new Standard Contractual Clauses approved by the European Commission in June 2021.
| Visual | Description and Implications |
 |
|
Transfers from a European Data Subject – Data Subject→Controller (US)
The following is part of Greenberg Traurig’s ongoing series analyzing cross-border data transfers in light of the new Standard Contractual Clauses approved by the European Commission in June 2021.
| Visual | Description and Implications |
 |
|
Transfers from a US Controller to EEA processors (Renvois) Controller (US)→Processor (US)→Sub-processor (EEA)→Controller (US)
The following is part of Greenberg Traurig’s ongoing series analyzing cross-border data transfers in light of the new Standard Contractual Clauses approved by the European Commission in June 2021.
| Visual | Description and Implications |
 |
|
Controller (EEA)→ Controller (US)→ Controller (non-EEA)
The following is part of Greenberg Traurig’s ongoing series analyzing cross-border data transfers in light of the new Standard Contractual Clauses approved by the European Commission in June of 2021.
|
Visual |
Implications |
 |
|
Cross-Border Transfer Master Class: Transfers from EEA Controller to non-EEA Controller: Controller (EEA) → Controller (U.S.) → Processor (Non-EEA)
| Visual | Implications |
 |
|
Cross-Border Transfer Master Class: Transfers from EEA Controller to non-EEA Controller: Controller (EEA) → Controller (U.S.) → Processor (U.S.)
| Visual | Implications |
 |
|
Cross-border Transfer Master Class: Does a U.S. controller need to use the SCCs when it onward transfers data received from a European to a non-EEA processor?
Companies are allowed to transfer personal data outside the European Economic Area (EEA) if they are (1) transferring data to an entity that is within a country that has been recognized by the European Commission as ensuring an adequate level of protection or (2) they have put in place a European Commission-approved mechanism (a “safeguard”)
Cross Border Transfer Master Class: Onward transfers from a US controller to a processor that is outside of the US and the EEA
Companies are allowed to transfer personal data outside the European Economic Area (EEA) if they are (1) transferring data to an entity that is within a country that has been recognized by the European Commission as ensuring an adequate level of protection or (2) they have put in place a European Commission-approved mechanism (a “safeguard”)
Cross Border Transfer Master Class: Onward transfers from a US controller to a US processor
Companies are allowed to transfer personal data outside the European Economic Area (EEA) if they are (1) transferring data to an entity that is within a country that has been recognized by the European Commission as ensuring an adequate level of protection or (2) they have put in place a European Commission-approved mechanism (a “safeguard”)
The ‘Other SCC’: June 4, 2021 EU Commission Decision on Data Processing Agreement Standard Contractual Clauses
So much has been said about the new Cross-Border standard contractual clauses (SCC), which the EU Commission finally adopted on 4 June 2021 (see GT blog post from 9 June 2021), that it almost went unnoticed that the Commission published two different kinds of SCC that day. The other set of SCC (the DPA-SCC)