European Union: Announced EU Commission Standard Contractual Clauses for transfer of data to third country controllers and processors subject to the GDPR

On 12 September 2024, the European Commission announced new Standard Contractual Clauses (SCCs) to govern the transfer of personal data to controllers and processors in third countries, specifically when those data importers are directly subject to the General Data Protection Regulation (GDPR). These clauses will complement the existing SCCs, which are used for data transfers to importers outside the EU who are not bound by the GDPR. The SCCs ensure compliance with GDPR requirements for international data transfers. A public consultation is planned for the fourth quarter of 2024, with feedback opportunities to follow.