Today's economy thrives on the free flow of personal information. The GDPR significantly restricts the ability of companies to export personal information outside the European Union (EU). On July 16, 2020, only two years after the GDPR became effective, the European Court of Justice (ECJ) issued a ground-breaking judgement in Schrems II, declaring the EU-US Privacy Shield invalid. In addition, the Schrems II ruling also specifies requirements that companies must meet when using the Standard Contractual Clauses (SCCs) for data exports. The ruling has far reaching consequences for companies doing business in the EU, both in the B2C and B2B context.
The Wilson Sonsini Privacy and Cyber Security team is organizing a series of webinars to address data transfer issues, given the business impact and legal uncertainty resulting from the Schrems II ruling. The series offers practical tips and insights on how to address data transfers restrictions and provides the latest developments in this fast-moving area.
The third session will discuss the European Commission's draft New Standard Contractual Clauses for Data Transfers. Hear directly from Alisa Vekeman, Policy Officer International Data Flows and Protection at the European Commission, and Nerea Peris Brines, Legal officer and deputy DPO at the European Data Protection Board, about the European Commission’s and EDPB's views on the new SCCs.
Items that will be covered include:
- Differences with the current Standard Contractual Clauses;
- Practical implications of the new provisions;
- Opinion of the European Data Protection Board;
- Guidance on how to implement the new provisions.