Companies that export personal data outside the European Economic Area must assess the surveillance laws and practice of intelligence agencies of the third country that may impede the effectiveness of the standard contractual clauses and, if such impediments exist, must implement supplementary measures. Notarize's Gary Weingarden, CIPP/A, CIPP/C, CIPP/E, CIPP/G, CIPP/US, CIPM, CIPT, FIP, PLS, and Deutsche Bank's Matthias Artzt, CIPP/E, aim to demystify data transfers to the U.S. from the EEA by looking at "Schrems II" from a different angle.
Full Story