Client Alert: The New Data Transfer SCCs
Deadline To Incorporate New EU Data Transfer SCCs In New Contracts Approaches - September 27, 2021By: Faith D. Kasparian, Ann M. O'Rourke and Ryan J. Perry
September 23, 2021
As we indicated in our prior Alert and recent Webinar on this subject, this summer, the European Commission released eagerly anticipated Standard Contractual Clauses (SCCs) for transfers to third countries (the “New Data Transfer SCCs”). The New Data Transfer SCCs are “model data protection clauses” that businesses can utilize to help ensure that they are in compliance with certain obligations under the General Data Protection Regulation (GDPR).
To the extent that your business relies on the SCCs as its EU data transfer mechanism, for new contracts, the New Data Transfer SCCs must be in use as of September 27, 2021.
Contracts entered into prior to September 27, 2021, that relied on the old SCCs may continue as is until December 27, 2022, provided that the processing operations under the contract remain unchanged and that reliance on the old SCCs ensures appropriate safeguards.