Which of the following types of transfers of personal data outside the European Economic Area (EEA) is allowed?

Question

Options

• Ato advise the controller in accordance with the prior consultation procedure referred to in Article
• BTransfers subject to the law of the countries involved.
• CTransfers conducted through Standard Contractual Clauses.
• DTransfers conducted under Compulsory Corporate Rules.

• A
  4% (1)
• B
  8% (2)
• C
  8% (2)
• D
  79% (19)

Explanation

Compulsory Corporate Rules are rules used internally by multinational companies to transfer personal data. Thus, it is possible to transfer data between them, even if the destination company is in a country that does not have an adequate level of data protection. These rules are like an internal corporate code of conduct and do not cover transfers of personal data outside the corporate group. Do not confuse "Compulsory Corporate Rules" with "Standard Contractual Clauses". The last are clauses in contracts for international data transfer between companies (customer and supplier relationship) where the destination country does not have an adequate level of data protection, and depends on authorization from the Supervisory Authority. Article 58 of GDPR 3. supervisory authority shall have all of the following authorisation and advisory powers:

No community discussion yet for this question.