The proliferation of new and updated data privacy laws around the world has resulted in a marked rise in the number of data transfer mechanisms. One such mechanism – and one of the most prevalent – is the implementation of contractual clauses between the data exporter and the data importer. These contractual clauses purport to govern how the data importer will process the personal data transferred to it. The clauses extend certain privacy safeguards which exist and are applicable to the data exporter and data importer in another jurisdiction.

This infographic shows the jurisdictions that have taken steps to standardize draft contractual clauses for transferring personal data internationally. There are at least 23 draft, template, or standardized contractual clauses or undertakings for international data transfers covering over 77 jurisdictions.

For information on global data adequacy capabilities, see this companion infographic.

Future research by the IAPP will detail the implementation of data transfer mechanisms across the globe, similarities and differences between them, and key takeaways for privacy professionals.

List of jurisdictions