New SCCs on public consultation (delayed again)
Announced in Sep 2024, delayed to Q2 2025, then to Q3, then to Q1 2026, and now to Q1 2027... Two public consultations for new SCCs: 1) For transfers to third country controllers/processors directly subject to the GDPR, and 2) for EU institutions' transfers to non-EU countries under the EUDPR
Jan 1, 2026
—
1 min read
You might also like
Denmark Google Workspace for Education Chromebook case (Helsingørgate)
paid
–
12 min read
🇩🇰 DPA concludes the case, applies the dreaded EDPB Opinion and signal enforcement change – and shares takeaways in webinar. Must-read if you're in Denmark but crucial to everyone using third-country processors, especially US ones.
Your OSS for the EU-US DPF
paid
–
8 min read
EDPB shares updated DFP docs – added nuance on transfer of HR Data.
Adequacy decisions
paid
–
4 min read
On 26 Jan, 🇪🇺🇧🇷 COM & Brazil adopted mutual adequacy decisions, allowing businesses, public authorities and researchers to freely exchange data.