On June 4, 2021, the European Commission on privacy has passed legislation to assist data importers and exporters in complying with the terms of the GDPR. The legislation creates standard privacy policy terms that are considered to provide adequate protection under the GDPR. This useful guidance may be used for those preparing policies to ensure compliance with the GDPR if they are importing/exporting data internationally. For those with existing policies, this may provide an opportunity to make sure that existing terms are commensurate with the protections offered by the standard clauses.
The clauses are provided in an annex to the legislation and are broken into Modules representing the types of data transactions involved. In this way, the data importer/exporter will be able to tailor their use of the standard clauses based on their role and use of data.
A link to the European Commission's standard contract clauses is provided here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en
