Brussels 13 November – At its latest plenary, the EDPB adopted a statement on the use of other models of contractual clauses for onward transfers of personal data*. The statement welcomes recent updates made by the European Commission on its FAQs on the EU Standard Contractual Clauses (SCCs)**, recognising that the Model Contractual Clauses (MCCs) developed by the Council of Europe (CoE MCC) and the ones developed by the Ibero-American Data Protection Network (RIPD MCC) may also be used for onward transfers of personal data received under the EU SCCs.

Result of a joint work

The EDPB and the Commission cooperated closely on this matter.

The Board welcomes the Commission’s recognition of these additional instruments to onward transfer personal data received under the EU SCCs. This means that, under the conditions explained in the Commission’s FAQs, an appropriate level of protection of individuals as guaranteed by the European data protection law may be provided when data is onward transferred on the basis of these sets of clauses.

In addition, the EDPB statement provides practical guidance to organisations seeking to rely on these MCCs, subject to the conditions set out in the Commission’s FAQs.

Note to editors:

* Model contractual clauses are contractual clauses developed by organisations and third countries. This news item refers to the Model Contractual Clauses developed by the Council of Europe (CoE MCC) and the ones by the Ibero-American Data Protection Network (RIPD MCC).

** Standard contractual clauses are standardised and pre-approved model data protection clauses that are used to ensure appropriate data protection safeguards for transfers of personal data to third countries.