Standard contractual clauses for international transfers—2010—controller to processor—ICO templates

The following Information Law precedent provides comprehensive and up to date legal information covering:

  • Standard contractual clauses for international transfers—2010—controller to processor—ICO templates

Standard contractual clauses for international transfers—2010—controller to processor—ICO templates

In brief

This precedent links to:

  1. a template created by the UK Information Commissioner’s Office (ICO) of the ‘2010’ EU Standard Contractual Clauses (also known as Model Clauses or SCCs) introduced by Commission Decision 2010/87/EU of 5 February 2010 for the transfer of personal data from data controllers established in the EEA to a data processor established outside the EEA under the General Data Protection Regulation (EU) 2016/679, EU GDPR

  2. a template created by the ICO of the same SCCs for use under the United Kingdom General Data Protection Regulation, Retained Regulation (EU) 2016/679, UK GDPR

The templates provided by the ICO include supplemental drafting notes added by the ICO, which you should refer to. The views of supervisory authorities in the EEA on SCCs under the EU GDPR may differ from the ICO (and one another) and local law and regulatory advice should be sought as appropriate.

EU GDPR SCC template

2010 SCC template—Background and forthcoming revocation

As explained in Practice Note: EU GDPR—transfers of personal data internationally and to international organisations, Chapter V of the EU GDPR restricts transfers of personal data outside the EEA (or to certain ‘international organisations’).

In summary, the 2010 controller to processor SCCs may be used under Chapter V of the EU GDPR:

  1. to transfer personal data from Organisation One to Organisation Two

Popular documents