France's data protection authority, the Commission nationale de l’informatique et des libertés, published guidance for controllers on how to identify and process data transfers outside the European Union. The CNIL advises controllers to keep an inventory of all data transfers, assess the risks the transfers could have on their organizations and determine whether the transfers have a legal basis.
Full Story