The Information Commissioner’s Office (‘ICO’) has issued new guidance for public consultation on cross-border transfers of personal data from the UK to third countries without an adequacy decision, replacing the old Standard Contractual Clauses (‘SCCs’) which are currently in use for such transfers.
The guidance has three documents:
- Guidance on conducting Schrems transfer impact assessment (which the ICO is calling a transfer risk assessment (‘the TRA Guidance’))
- Guidance on International Data Transfer Agreements (‘the IDTA Guidance’)
- Addendum to new SCCs