Third Party as Compliance Focus – How to Combine Theory and Practice in Your Enterprise
summary
Schrems II leaves exporters with documentation and risk questions so the practical path is a four-step, risk-based workflow: map all transfers and link them to processing registers, run a transfer impact assessment (third‑country equivalency + supplementary measures) using prebuilt dynamic questionnaires and vendor databases, prioritize and remediate high‑risk transfers with audit‑proof records and central tasking, then monitor and reassess (automate semiannual checks for high risk). Also use a third party risk exchange and an automated response catalog (NLP matches answers with confidence scores) to cut reply overhead.
AI-written summary · about
chapters (17)
- 0:00Intro
- 1:51Agenda
- 2:52Trust and Transparency
- 3:50Data Transfers
- 5:52Challenges
- 8:18Riskbased approach
- 9:40Transfer impact assessment
- 12:15Assess supplementary measures
- 13:09Impact assessment
- 14:12Risk prioritization
- 15:19Audit proof
- 16:36Monitoring
- 18:02Make your life easier
- 19:14Trust profile
- 20:04Assessments
- 21:04AI Language Processing
- 22:35Outro
related talks
01h 03mDeep Dive Workshop – Third Country Data Transfer
51mThe Overlooked Security Risk: 3rd Party Risk Management
27mThird-party Risk Management: SOC 2s, Security Questionnaires...
01h 19mACCOUNTABILITY TOOLS:FROM TRANSFERS TO CROSS-BORDER INTEROPERABILITY
05m3 questions to – Bojana Bellamy
21mInternational Data Transfers – What's the Issue
58mGlobal Data Flows and Perspective – Keynote & Panel
51mYour Third-Party Risk Management Program Is Bad and You Should Feel Bad