The European Data Protection Board and the European Data Protection Supervisor have adopted joint opinions on new sets of standard contractual clauses. The first opinion covers SCCs for contracts between controllers and processors and the other focuses on SCCs for data transfers to third countries. The EDPB and EDPS state the draft SCCs provide a "reinforced level of protection" for data subjects, but added certain provisions could be improved or clarified, such as the scope of the SCCs and obligations regarding onward transfers. Editor's note: IAPP Research Director Caitlin Fennessy, CIPP/US, wrote about the European Commission's draft implementing decision on SCCs for The Privacy Advisor.
Full Story