Regulatory and Industry News Alerts from Armanino

European Commission Adopts New Standard Contractual Clauses for Data Transfers Under GDPR

by Mirena Taskova, Pippa Akem
June 22, 2021

The General Data Protection Regulation (GDPR) is a uniform European law on data protection and privacy that applies to any company that collects, processes or stores the personal data of anyone in the European Union/European Economic Area (EU/EEA). It also addresses the transfer of personal data outside the EU/EEA.

On June 4, 2021, the European Commission published its final implementing decision, adopting modernized standard contractual clauses (SCCs) under the GDPR for data transfers from controllers or processors in the EU/EEA (or otherwise subject to the GDPR) to controllers or processors established outside the EU/EEA (and not subject to the GDPR).

  • The new SCCs will replace the old three sets that were implemented under the Data Protection Directive 95/46.
  • The implementing decision takes effect on June 27, 2021. This is 20 days after the decision’s publication in the Official Journal of the EU.
  • You can continue signing contracts with t he previous sets for another three months but after September 27, 2021, no new contracts can be signed using the old SCCs.
  • There will be an 18-month transition period, from the effective date of the implementing decision, for agreements concluded before September 27, 2021. You will have until December 27, 2022, to revise your agreements that incorporated the old SCCs and replace them with the new sets.
If you have any additional questions, contact our experts.


Stay In Touch

Sign up to stay up-to-date with the latest accounting regulations, best practices, industry news and technology insights to run your business.

Mirena Taskova - Managing Director, Privacy & Cybersecurity - San Jose CA | Armanino
Managing Director, Head of Privacy and Cybersecurity
Related News and Insights
Power of Vendor Risk Analytics Exchange Webinar
Gain insights on risk trends and improve your vetting process through data from over 80,000 supply chain vendors.

July 28, 2021 | 10:00 AM - 11:00 AM PT
Regulatory and Industry News Alerts from Armanino
The European Commission’s latest decision allows personal data to flow freely from the U.K. to the EU.

July 08, 2021
How to Start Building a Secure Data Privacy Program
Aligning to a framework, such as Microsoft’s SSPA, can help you protect internal and customer data.

June 29, 2021