On June 21, the European Data Protection Board issued its highly anticipated final recommendations on supplementary measures for data transfers. The recommendations outline a process organizations can follow to transfer personal data outside the European Economic Area to ensure compliance with the "Schrems II" judgment. "Those who hoped to see the EDPB move away from the dogmatic position it had staked out in its draft recommendations will be pleased to see that the final recommendations embrace a more risk-sensitive approach," write Covington & Burling's Jetty Tielemans, Dan Cooper and Gabe Maldoff, CIPP/US.
Full Story