The Information Commissioner’s Office (‘ICO’) has issued new guidance for public consultation on cross-border transfers of personal data from the UK to third countries without an adequacy decision, replacing the old Standard Contractual Clauses (‘SCCs’) which are currently in use for such transfers.
The guidance has three documents:
- Guidance on conducting Schrems transfer impact assessment (which the ICO is calling a transfer risk assessment (‘the TRA Guidance’))
- Guidance on International Data Transfer Agreements (‘the IDTA Guidance’)
- Addendum to new SCCs
In Part 2 of this series for OneTrust DataGuidance, I discuss the ICO’s recommendations for what to include in international data transfer agreements (‘IDTAs’).
Part 1 of the series previously looked at TRA Guidance.