12
Nov
After a long, four-month wait, we finally have recommendations from the European Data Protection Board (EDPB) on “supplementary measures” in the context of international transfers of personal data – i.e. measures required to ensure that transfers to countries outside of the European Economic Area (EEA) are permitted under the GDPR.
Follow-up on Schrems II
Under the GDPR, transfers of personal data from the EEA to a non-EEA recipient are prohibited unless the sender has a certain degree of confidence – thanks to...