3 ms·
Worth noting is that the standard contractual clauses don't necessarily specify that the data has to remain within the EU - it just mandates that the company ha
by geewee 6y ago
Worth noting is that the standard contractual clauses don't necessarily specify that the data has to remain within the EU - it just mandates that the company has to provide adequate protections.
- ThePhysicist 6y agoYes, but I'm not sure if that would work for data stored in the US as the problem is that intelligence agencies can request access to the data without the data subjects ever being notified about this. If the clauses cannot be effectively enforced (which I don't think they can in the US) it's not possible to rely on them.
- geewee 6y agoThe press release seems to suggest that the standard contractual clauses are still good enough - It'd be weird to suggest that if it isn't true in practice. But I'm unsure, and you have some valid points.
- ThePhysicist 6y agoYes relying on standard contractual clauses is a valid approach in general, but not necessarily for transferring data to the US. You can use them e.g. when transferring data to countries that provide effective and enforceable privacy guarantees, as e.g. Switzerland, South Korea or Singapore do.
- deleted 6y ago[deleted]