New standard contractual clauses for data transfers outside of the EU/EEA
Today the Commission issued modernised standard contractual clauses under the GDPR for data transfers from controllers or processors in the EU/EEA (or otherwise subject to the GDPR) to controllers or processors established outside the EU/EEA (and not subject to the GDPR). These modernised SCCs will replace the three sets of SCCs that were adopted under the previous Data Protection Directive 95/46. Organization have 18 months to comply with these new Standard Contractual Clauses.