One of the data transfer mechanisms approved by the Commission (z.B. the SSC) exists, or a data processing agreement (DPA), in German the data processing contract (AVV, formerly the data processing contract) is concluded by companies (dataresponsible) when personal data is processed by a service provider dependent on instructions (Data Processor, dataververunging). The DPA guarantees both parties and regulates for both parties the specifics of the processing of personal data. For example, the breadth and purpose of memory and data processing. In addition, the DPA has died from the EU`s Basic Data Protection Regulation (GDPR) and data protection-friendly measures. The new CSC clearly outlines the obligations of the controller and subcontractor. In many cases, the English-language version of the new SSC is clearer than the English-language version of the RGPD itself. U.S. companies with little knowledge of the RGPD – for example, companies that receive personal data from the EU but do not themselves fall within the territorial jurisdiction of the RGPD – will find it easier to understand their concrete obligations under the SSCs. The clarity of the new SSC is a marked improvement over the RGPD`s wave of contractual hands, which is a feature of many agreements with EU personal data. This data processing agreement is adapted by the DPA De ProtonMail which is on this page. Organizations can use the following document as part of their compliance with the RGPD. The new SSCs represent a huge improvement over the current scCs, which were last updated in 2004 (for controller-to-controller transmissions) and 2010 (for processor controller transmissions).
The new SSCs are modular and cover the following data transfer situations: Most US companies receiving European personal data are aware that the RGPD prohibits the transfer of personal data from the EEA to „third countries“ that do not benefit from a Commission „adequacy decision“ (currently 12 countries have one) , unless you conduct, or do you as a data exporter, only the relevant client companies, such a data transfer agreement, execute with the relevant accent unit or a third-party unit as a data importer. The Commission has filled one of the main gaps in the EU-approved data transmission mechanism by providing processor transmissions to a controller and processor. Among other sectors, the pharmaceutical industry will welcome this new flexibility: US sponsors (and other third countries) who are not based in Europe will soon be able to use CSC to cover routine EU data transfers for clinical trials of their European CROs (which are processors). 8. The data protection impact analysis and the pre-consultation subcontractor provide the company with appropriate support for all data protection impact assessments and prior consultations with supervisory authorities or other relevant data protection authorities that the company deems reasonably necessary under Articles 35 or 36 of the RGPD or the equivalent provisions of another data protection law. , in any event exclusively with regard to the company`s handling of personal data and taking into account the nature of the processing and data protection information. that are available to contract processors.