Back

Third Country Transfers

Following the Schrems II ruling, additional requirements have been placed on transfers of personal data outside of the EU/EEA. Prior to a transfer, every business must assess the risk of the intended transfer and take measures to minimize it.
INTEGRITET-DATA-tredjelandsoverforingar

Today, most businesses have a complex contract and IT structure that involves many different global subcontractors and partners. This often means that personal data is transferred between different actors within and outside the EU/EEA. We help you navigate in the jungle and find ways to be able to continue to use suppliers like Google, Microsoft, and AWS, while protecting privacy. We have developed a method that helps you understand transfer risks, identifies the appropriate transfer mechanics, and assesses which measures can be taken to reduce the risk. Simultaneously, we prepare the required documentation.

 

So-called standard contractual clauses are often used to justify a transfer outside of the EU/EEA. On 27 December 2022, the old standard contractual clauses will no longer apply, and need to be replaced by the new standard contractual clauses adopted by the EU Commission in June 2021. This means that most businesses have extensive contract work ahead of them. Our specialists will help you to identify which relationships are affected, as well as prepare and replace the existing standard contractual clauses with the new ones.