Regulatory

Blog

Regulatory

Contributors

Aki Corsoni-Husain
Aki Corsoni-Husain
  • Aki Corsoni-Husain

  • Partner
  • Cyprus
George Apostolou
George Apostolou
  • George Apostolou

  • Partner
  • Cyprus
Chiara Deceglie
Chiara Deceglie
  • Chiara Deceglie

  • Partner
  • Luxembourg
Massimiliano della Zonca
Massimiliano della Zonca
  • Massimiliano della Zonca

  • Senior Associate
  • Luxembourg
Philip Graham
Philip Graham
  • Philip Graham

  • Partner
  • British Virgin Islands
Ayana Hull
Ayana Hull
  • Ayana Hull

  • Counsel
  • British Virgin Islands
Katerina Katsiami
Katerina Katsiami
  • Katerina Katsiami

  • Associate
  • Cyprus
Petros Kiteos
Petros Kiteos
  • Petros Kiteos

  • Associate
  • Cyprus
Andrew Knight
Andrew Knight
  • Andrew Knight

  • Partner
  • Luxembourg
Joshua Mangeot
Joshua Mangeot
  • Joshua Mangeot

  • Counsel
  • British Virgin Islands
Mirza Manraj
Mirza Manraj
  • Mirza Manraj

  • Counsel
  • Hong Kong
Elina Mantrali
Mirza Manraj
  • Elina Mantrali

  • Associate
  • Cyprus
Vanessa Molloy
Vanessa Molloy
  • Vanessa Molloy

  • Partner
  • Luxembourg
Andrea Moundi Savvides
Andrea Moundi Savvides
  • Andrea Moundi Savvides

  • Consultant
  • Cyprus
Marina Stavrou
Marina Stavrou
  • Marina Stavrou

  • Associate
  • Cyprus
Matt Taber
Matt Taber
  • Matt Taber

  • Partner
  • Cayman Islands
Carolynn Vivian
Carolynn Vivian
  • Carolynn Vivian

  • Senior Associate
  • Cayman Islands

European Commission issues draft Implementing Decision on new standard contractual clauses for the transfer of personal data to third countries

On 12 November 2020, the European Commission published a draft Implementing Decision (Draft Implementing Decision) on new Standard Contractual Clauses (New SCCs) for the transfer of personal data to third countries pursuant to the European Union’s General Data Protection Regulation (EU 2016/679) (GDPR).

The New SCCs aim to reflect the requirements introduced under the "Schrems II" judgment and also to assist data transferors to incorporate safeguards for data transfers that go beyond the current standard contractual clauses. They additionally address known shortcomings of the current SCCs, such as catering for data transfers by EU processors to sub-processors and from EU processors to their instructing controller. Importantly in this respect, the New SCCs expressly state they can be used by parties that are not established in the EU. 

Once approved, businesses will have one year from the date the New SCCs enter into force to replace the current standard contractual clauses used by organisations for making international transfers of personal data under the GDPR.  

The Draft Implementing Decision is open for public consultation until 10 December 2020 and can be found here.