Are your personal data transfers lawful?

In June 2021, the European Union (EU) introduced a new set of Standard Contractual Clauses (“SCCs“) for the purpose of transferring EU personal data. The United Kingdom (UK) implemented its own International Data Transfer Agreement (“IDTA“) for the transfer of UK personal data, and established an Addendum to facilitate the transfer of both UK and EU data.

It is crucial for firms to…

replace their previous EU SCCs with the appropriate documentation by 21st March 2024. Until 21st March 2024, any transfer arrangements using the previous EU SCCs, which were concluded before 21st September 2022, will remain valid. However, after this date, unless alternative documents have been implemented, any ongoing transfer of EU personal data or UK personal data to third countries will directly violate the EU General Data Protection Regulation (“GDPR“) and/or the UK GDPR.

Please click here to access our guide to the data protection regulations.

Please click here to follow us on LinkedIn to receive the latest information on this and other important topics.