Following the “Schrems II” decision, whether businesses are using standard contractual clauses or a state-agreed mechanism, they must assess the adequacy of data protection arrangements in both the recipient country and the country where they are based. A global, independently certified standard like ISO/ICE 27701 is one way to do so efficiently. Mills Oakley Digital Law Partner Alec Christie and Senior Associate Andrea Mitchell explain the framework and how it can be used post-"Schrems II."
Full Story