Practical Considerations for Assessing Data Transfers after Schrems II

Latham & Watkins LLPLatham develops new resource to identify considerations for assessing SCC and BCR data transfers in Europe.

Following the Schrems II decision in July 2020, organisations relying on the standard contractual clauses (SCCs) or Binding Corporate Rules (BCRs) to transfer personal data outside of the European Economic Area are required to assess whether the law of the destination country ensures adequate protection for the personal data being transferred. Organisations may also need to put in place additional safeguards to ensure an essentially equivalent level of protection. The CJEU indicated that SCCs should not be used if the destination country’s legal regime prevents compliance with their terms or impinges on the level of protection they afford.

Latham & Watkins has produced a Data Transfer Risk Assessment, a practical framework for identifying issues that companies may wish to consider when assessing the level of risk involved in a particular data transfer, based on the SCCs or on BCRs.

The framework can be used to assess transfers to any country outside the EEA, and includes illustrative examples that examine certain issues under US law. Latham is expecting further guidance from the European Data Protection Board on the requirements for this assessment and the additional safeguards that may be appropriate. Latham will continue to update and amend the Data Transfer Risk Assessment as the law and guidance develops.

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Latham & Watkins LLP | Attorney Advertising

Written by:

Latham & Watkins LLP

Latham & Watkins LLP on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide

This website uses cookies to improve user experience, track anonymous site usage, store authorization tokens and permit sharing on social media networks. By continuing to browse this website you accept the use of cookies. Click here to read more about how we use cookies.