I do not consider myself a risk-averse, but definitely, vouch for risk assessments. Simply, we all get the consequences of our actions, so why not to address the things adequately?. I reviewed the alternative transfer tools available to keep on transferring personal data to the U.S. The derogations are limited, and there is no room for […]
Read MoreCategory: Data Transfers
CJEU Judgement: EU-US PRIVACY SHIELD NO LONGER VALID
On the 16 of July 2020, the Court of Justice of the European Union ( “CJEU”) declared invalid the Privacy Shield decision and hence, the certification as an adequate mechanism to transfer personal data from the EEA to the U.S. The judgement C-311/18 can be found here. Thus, nowadays, the transfers of personal data from […]
Read MoreTransborder Data Flows: Assessment Process and Transfer Mechanisms
Transborder data flow is a transfer of personal data to a recipient who or which is subject to a foreign jurisdiction. For instance, a simple email containing personal data is sent to a group internal email address, which includes addresses located outside the EU*, already forms an international data transfer. (Art.44 GDPR) So, first, it is […]
Read MoreBinding Corporate Rules for a “group of enterprises engaged in a joint economic activity”
Once the GDPR enters into force, the Binding Corporate Rules (BCRs) will be explicitly recognized as mechanism adducing appropriate safeguards to the transfer of personal data outside the EU. This new inclusion, not only recognizes the use of BCRs for the transfer of personal data within a corporate group but also allow it to a […]
Read MoreBinding Corporate Rules or Standard Contractual Clauses?
When implementing the GDPR, international transfer of personal data is one of the biggest challenges for a group of companies. This is because, usually, the company members share personal data between each other or send personal data to a group of enterprises engaged in the same economic activity which are not always located in the […]
Read MoreThe EU-US Privacy Shield
We live in a digitalised world, where the processing of personal data has intensified, and as a result, there is a need in the market to increase the processing capabilities. Now, the US is a big market and as such offers a variety of services and products such as cloud storage, marketing services, digital commerce, […]
Read MoreEU Standard Contractual Clauses: When and How to use them
The EU contractual clauses commonly referred to as standard contractual clauses (“SCCs”) has been developed to make possible the data exporting, transfer of Personal Data abroad, safeguarding a sufficient level of data protection at the recipient.
Read More