The new standard contractual clauses or SCC (Standard Contractual Clauses) for the transfer of personal data to non-EU/EEA countries published by the EU Commission on June 7, 2021, must be used in new or amended contracts as of September 27, 2021. In addition, all existing agreements are only valid until December 27, 2022. That's the end of this year!
To comply with the new SCC, it is mandatory that a specific Transfer Impact Assessment (TIA) be performed. A TIA is a separate risk assessment for data transfers to third countries that includes, among other things, the likelihood of third parties accessing data subjects' data.
Since no general standards and best practices for compliance have yet been established, each organization must figure out for itself how best to mee ...