The last weeks were all about the recent European Court of Justice (ECJ) ruling in the so-called "Schrems II" case, invalidating the data exchange mechanism between the US and the EU (Privacy Shield). Also, the Court decided that transfers of personal data to non-EU countries with Standard Contractual Clauses is still valid, however, the ruling imposes obligations on companies to assess the level of data protection in the recipient country. In light of these discussions, we provide you with some of our materials related to third country transfers - and share really exciting news about the newest member of our umbrella organization SRIW.
Happy reading,
Your SCOPE Europe Team.
Standard Data Protection Clauses
Together with a joint industry consortium, we developed a set of Standard Data Protection Clauses for the processor2processor environment. The current draft already addresses supplementary measures, as mentioned by the ECJ ruling. E.g. the draft provides several mechanisms related to transparency and exchange of information and also requires periodic re-evaluation to ensure effectiveness and enforcement of these SDPC; a mayor focus of the ECJ to accept contractual clauses at all.
Third country transfer tools
Already pre-Schrems II, we discussed the role of alignment and interoperability for third country transfers in this IAPP piece
Welcome, eyeo!
We're excited that our umbrella organization SRIW welcomes its newest member eyeo: “With eyeo, we welcome a young, innovative and successful company as new member of SRIW", says Dr. Claus D. Ulmer, chairman of the executive board of SRIW and Global Data Privacy Officer and Senior Vice President Group Privacy at Deutsche Telekom