BCLP Global Data Privacy FAQs: How do the new Article 28 clauses fit with the new SCCs? Are both needed for a non-EU processor?

In short, no.  It is not necessary to use both the new SCCs and the new Article 28 clauses at the same time.

What are the European Commission approved Article 28 clauses?

Whilst the European Commission’s new standard contractual clauses (“SCCs”) for transfers to third countries (the “new SCCs”) received most of the fanfare when published on 4 June 2021, that date also saw the publication of a set of model processing clauses for use between controllers and processors (the “Article 28 SCCs”).

The Article 28 SCCs provide standard terms covering the content which must be included within data processing agreements between controllers and processors, pursuant to Article 28 of the General Data Protection Regulation (2016/679) (the “EU GDPR”). They provide a ready-made, EU GDPR compliant, off the shelf solution for parties wishing to enter into data processing agreements who, for example, don’t have a pre-existing approach to such contracts and their use is entirely voluntary. As far as the UK is concerned, the Article 28 SCCs have no status under the UK GDPR. 

When can you use the Article 28 SCCs and when do you need to use the new SCCs?

The Article 28 SCCs are only relevant to use in a controller-processor relationship that does not involve any outbound transfers of personal data to third countries. When data export to third countries is involved, the new SCCs offer the benefit of incorporating Article 28 GDPR compliant language within the controller – processor module, meaning that EEA based controllers may transfer personal data to a third country based processor without any need to enter into a separate data processing agreement or the Article 28 SCCs.

[View source.]

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Bryan Cave Leighton Paisner | Attorney Advertising

Written by:

Bryan Cave Leighton Paisner

Bryan Cave Leighton Paisner on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide

This website uses cookies to improve user experience, track anonymous site usage, store authorization tokens and permit sharing on social media networks. By continuing to browse this website you accept the use of cookies. Click here to read more about how we use cookies.