[vc_row][vc_column][vc_column_text css=”.vc_custom_1645113788441{margin-bottom: 0px !important;}”]Last week the European Commission announced that the Standard Contractual Clauses (the “SCCs”) are being updated. These changes primarily apply to entities exporting data out of the European Economic Area. Starting in 2021, whether you’re a controller or a processor (or both!), you’ll need to make certain your SCCs and your data export policies are compliant with the new laws.
The good news is that data exporters will have all of 2021 to align with these new obligations. To ensure data exporters don’t have to start from scratch, the European Commission has provided recommendations to ensure compliance.
Step 1 – Transfer Mapping
Curious about where to start? Step 1 is to create a road map of where the personal data exported by your company goes. Data exporters should review their existing data relationships. Whose data are you exporting? What personal data does that export include? Which countries are receiving the exported data? What are your reasons for exporting that data?
You also need to think about the downstream data use. For example, if you’re a processor, are you transferring personal data to a sub-processor who’s located in a third country? Are THEY transferring that data to another party in a different country? Remember that a “transfer” can be something as routing as cloud storage or support services outside the EEA.
This can be a strenuous task for companies that export a lot of personal data out of the EEA. However, the transfer mapping is an absolutely essential first step in knowing what actions – if any – you’ll need to take with your existing data agreements and internal practices.
Next Steps – Transfer Tools and Assessments
There’s more to do after you’ve completed your transfer mapping project. If you’ve mapped any personal data being exported out of the EEA, you’ll need to move on to steps 2 and 3: verifying your transfer tools and assessing third-country laws. Make sure to check back in for our next posts on these steps, and contact us if you have any questions about Standard Contractual Clauses!
Carney Badley Spellman is about Advocacy, Strategy, Results. Located in Seattle, we are a full-service law firm committed to exceptional client service and professional excellence. Our firm serves individuals, professionals, entrepreneurs, educators, closely-held or family businesses, franchises, Fortune 500 corporations, and insurance companies. They are in the private sector, public sector, and governments. Our clients are forward thinkers, creative, collaborative, and deliver high-quality products and business services to their markets. Their markets extend into almost every industry including, food and beverage, retail, professional services, arts, health care, education, manufacturing, technology, construction, real estate, and more. We advocate for our clients. We strategize with them to meet their goals.[/vc_column_text][/vc_column][/vc_row]
