EDPB recommendations on third country law assessment and data transfer practices post-Schrems II

The European Data Protection Board (EDPB) issued its Supplementary Measures Recommendations and EEG Recommendations on 10 November 2020 following the Schrems II judgment by the European Court of Justice (CJEU). The recommendations describe how to assess third country data protection regimes and how organisations can transfer personal data outside the EEA in compliance with the GDPR and Schrems II. The EDPB offers a clear six-step procedure to enable international data transfers and provides a number of use case scenarios, which describe how to apply this procedure.