International Transfers of Personal Data After Schrems II: Practical Compliance Steps
It’s been a busy few years of mapping data flows, assessing third-country laws and practices, repapering contractual clauses, and implementing technical and organisational measures, as private and public organisations undertook to meet a 2022 hard deadline for ensuring that transfers of personal data of individuals in the European Union (EU) complied with the 2016/679 General Data Protection Regulation (GDPR) and European Court of Justice Case C-311/18 (the Schrems II ruling) and address the impacts of a March 2024 compliance deadline for transfers of UK personal data.
This article provides a refresher on controller obligations for both private and public organisations when it comes to handling individuals’ personal data.