CIPP-US · Question #121
A company based in United States receives information about its UK subsidiary's employees in connection with the centralized HR service it provides. How can the UK company ensure an adequate level of
The correct answer is B. By revising the contract with the United States parent company incorporating EU SCCs, as it. The UK company can ensure an adequate level of data protection for the restricted data transfer to the US parent company by using the EU Standard Contractual Clauses (SCCs), which are contractual terms that provide safeguards for personal data transferred from the UK to third cou
Question
A company based in United States receives information about its UK subsidiary's employees in connection with the centralized HR service it provides. How can the UK company ensure an adequate level of data protection that would allow the restricted data transfer to continue?
Options
- ABy signing up to an approved code of conduct under UK GDPR to demonstrate compliance with
- BBy revising the contract with the United States parent company incorporating EU SCCs, as it
- CBy submitting to the ICO a new application for the UK BCRs using the UK BCR application forms,
- DBy allowing each employee the option to opt-out to the restricted transfer, as it is necessary to
How the community answered
(27 responses)- A4% (1)
- B81% (22)
- C11% (3)
- D4% (1)
Explanation
The UK company can ensure an adequate level of data protection for the restricted data transfer to the US parent company by using the EU Standard Contractual Clauses (SCCs), which are contractual terms that provide safeguards for personal data transferred from the UK to third countries. The UK GDPR recognizes the validity of the EU SCCs adopted before the end of the Brexit transition period, and allows the UK Information Commissioner's Office (ICO) to issue new SCCs in the future.
Topics
Community Discussion
No community discussion yet for this question.