The current set was adopted by Commission Implementing Decision (EU) 2021/914 and comes in modules for different controller and processor combinations. Using them also requires assessing whether the destination country's law lets the importer comply.
The guide to international data transfers covers how they work in practice.
Read more
Related terms
- GDPR
- The GDPR is the EU General Data Protection Regulation, which governs how personal data of people in the EU is processed and protected.
- Data processing agreement
- A data processing agreement is the contract GDPR Article 28 requires between a controller and a processor, setting how personal data may be handled.