International Data Transfer After Schrems II - Facing the Risk?
summary
Schrems II rejects the US Privacy Shield invalidated and forces a risk-based approach: the EU issues new rules, notably SCCs updated 4 June 2021, and the EDPB issues EDPB six-step risk assessment guidance. Organizations must inventory transfers, pick a transfer tool, assess local laws and practices (Cloud Act, executive orders), and adopt technical or contractual supplementary measures — e.g., encryption with key separation, data segregation, pseudonymization — then document approvals and re-evaluate periodically; transfers are not banned but require concrete, demonstrable safeguards.
AI-written summary · about
chapters (11)
- 0:00Intro
- 2:44Welcome
- 6:13Legal Situation
- 7:24Standard contractual clauses
- 9:55Whats the reality
- 12:27We should do something
- 14:45There might not be a simple solution
- 17:43EDPP recommendations
- 21:59Risk assessment
- 24:47Summary
- 26:19Conclusion
related talks
19mUse of Cloud and Other Services in the Context of Schrems II
01h 00mAn Existential Crisis for Global Data Flows: Privacy and Security Issues
58mGlobal Data Flows and Perspective – Keynote & Panel
21mInternational Data Transfers – What's the Issue
01h 20mThe Transatlantic Debate
01h 03mDeep Dive Workshop – Third Country Data Transfer
45mData Privacy Legislation and the Impact on SRE
05m3 questions to – Bojana Bellamy