Let’s say you are an EU company. You engage a processor. Data is processed in the EU. There is no transfer.
But in the processor-sub-processor data processing agreement, the data
Continue Reading Where Is a Transfer? Datatilsynet Says Almost Everywhere!
“Currently, unless a US CLOUD Act warrant is recognized or made enforceable on the basis of an international agreement, the lawfulness of such transfers of personal data cannot be ascertained”
Continue Reading EU Agencies Issue Joint Response on Impact of US CLOUD Act