If a company chooses to ground an international data transfer on the contractual route, which of the following is NOT a valid set of standard contractual clauses?

The correct answer is C. Decision 2007/72/EC (EU processor to non-EU or EEA controller). This is not a valid set of standard contractual clauses because it does not correspond to any of the decisions adopted by the European Commission under the GDPR or the previous Data Protection Directive 95/46. The correct decision for EU processor to non-EU or EEA controller is…

International Data Transfers

Question

Options

ADecision 2001/497/EC (EU controller to non-EU or EEA controller).
BDecision 2004/915/EC (EU controller to non-EU or EEA controller).
CDecision 2007/72/EC (EU processor to non-EU or EEA controller).
DDecision 2010/87/EU (Non-EU or EEA processor from EU controller).

How the community answered

(32 responses)

A
22% (7)
B
13% (4)
C
59% (19)
D
6% (2)

Explanation

This is not a valid set of standard contractual clauses because it does not correspond to any of the decisions adopted by the European Commission under the GDPR or the previous Data Protection Directive 95/46. The correct decision for EU processor to non-EU or EEA controller is Decision 2010/87/EU, which was amended by Decision 2004/915/EC. Decision 2007/72/EC is actually related to the recognition of the adequacy of the protection of personal data in

Topics

#standard contractual clauses#SCC Commission decisions#controller-to-processor SCCs#international transfers

Community Discussion

No community discussion yet for this question.

Full CIPP-E Practice