What is Cross-border data transfers?
In short
Privacy laws restrict sending personal data to other countries. Under European Union rules, transfers need an adequacy decision for the destination, standard contractual clauses, binding corporate rules or another approved mechanism.
Key takeaways
- The European Union and United States Data Privacy Framework, adopted in 2023, covers transfers to participating United States companies.
- Some countries require certain data to be stored locally.
- Cloud services may store data in several countries, which must be considered.
Where it's tested
ISC: Privacy & Regulatory Frameworks — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
A US company wants to transfer employee personal data from its European Union subsidiary to the United States. Which mechanism is commonly used to make such transfers lawful?