On June 27, 2021, the European Commission adopted new Standard Contractual Clauses (SCCs) for organizations to implement for transfers of personal data to third countries without adequate data protection. This was a response to the July 2020 Schrems II decision, where the European Union ("EU") invalidated the EU-US Privacy Shield. This decision ultimately held that the United States is a "third country" that lacks an adequate data standard.
Truescreen recommends that clients begin to reach out to their respective Account Managers for a copy of the SCCs. Truescreen will also provide to our main contacts at our affected clients, a copy of the SCC's for review for execution. Prompt acknowledgement from clients is most appreciated, as we require SCC compliance in advance of the December 22, 2022 deadline.
Clients should be aware that at this time, the SCCs only apply to data transfers from the European Union, which does not include the United Kingdom (UK). The United Kingdom Information Commissioner is currently considering a "UK addendum" to data transfer agreements such as the SCCs. Truescreen will notify clients as more information becomes available regarding UK data transfers.
Posted: September 23, 2021