Standard Contractual Clauses

​

 

• EU Commission Implementing Decision  on standard contractual clauses between controllers and processors under Article 28 (7): Access here.

 

• EU standard contractual clauses for controllers and processors in the EU/EEA: Access here.

 

• EU standard contractual clauses for the transfer of personal data to third countries: Access here.

 

• Questions and Answers for the two sets of EU standard Contractual Clauses Questions and Answers for the two sets of Standard Contractual Clauses: Access here.

 

• The UK´s International Data Transfer Agreement (IDTA):Access here

 

• UK international data transfer addendum to the European Commission’s standard contractual clauses for international data transfers (UK Addendum): Access here

​

• International Data Transfer Agreements – UK Transitional Provisions: Access here.

 

​

Binding Corporate Rules

​

​

• List of BCRs approved under GDPR : Access here

​

• List of pre-GDPR BCRs approved before 25 May 2018: Access here

                          

• Recommendations 1/2022 on the Application for Approval on the elements and principles to be found in Controller Binding Corporate Rules ( Art. 47 GDPR): Access here

​

• Working Document on the approval procedure of the Binding Corporate Rules for controllers and processors under the GDPR (WP 263, rev.01): Access here

 

• Recommendation on the approval of the Controller Binding Corporate Rules form (WP 264): Access here

​

• A29WP, ‘Working Document: Transfers of personal data to third countries: Applying Article 26(2) of the EU Data Protection Directive to Binding Corporate Rules for International Data Transfers’, 3 June 2003 : Access here

 

 

​

Approved code of conducts

​

 

• Guidelines 04/2021 on codes of conduct as tools of transfers: Access here.

 

• EDPB Document on the procedure for the development of informal “Codes of Conduct sessions”: Access here.

 

• Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679: Access here

​

​

Approved certification mechanisms

​

​

• Guidelines 07/2022 on certification as a tool for transfers: Access here

 

• GDPR-CARPA first certification mechanism adopted under GDPR (13th May 2022). Access here