When does the European Data Protection Board (EDPB) recommend reevaluating whether a transfer tool is effectively providing a level of personal data protection that is in compliance with the…

Question

Options

• AAfter a personal data breach.
• BEvery three (3) years.
• COn an ongoing basis.
• DEvery year.

• A
  2% (1)
• B
  2% (1)
• C
  88% (36)
• D
  7% (3)

Explanation

According to the EDPB Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data, exporters of personal data to third countries must monitor, on an ongoing basis, developments in those third countries that could affect the level of protection of the personal data they transfer. This means that exporters must reevaluate whether the transfer tool they rely on, such as standard contractual clauses, binding corporate rules, codes of conduct, or certification mechanisms, is effectively providing a level of personal data protection that is in compliance with the EU level. The EDPB recommends that exporters document this reevaluation and any changes that result from it. The EDPB does not specify a fixed time interval for this reevaluation, but rather states that it should be done on an ongoing basis, taking into account the specific circumstances of each transfer and any relevant developments in the third country.

No community discussion yet for this question.