The discussion around transborder data transfers following the Court of Justice of the European Union's "Schrems II" ruling has primarily focused on the EU-U.S. Privacy Shield agreement and standard contractual clauses. Little has been said about how the decision affects other data transfer methods, such as binding corporate rules. IAPP Senior Westin Research Fellow Henriette Tielemans dives into the European Data Protection Board's stance on BCRs following "Schrems II" and how the process to obtain them is "fundamentally different" than other data transfer mechanisms.
Full Story