Do your company's personal data transfers comply with EU data protection legislation? – Perform a mandatory assessment with the help of our Transfer tool

EU data protection legislation requires companies around the EU to evaluate their transfers of personal data to so-called third countries outside the EU and the EEA. The assessment must be carried out to ensure that the level of data protection guaranteed in the EU is not undermined even where personal data is processed in third countries. The assessment must be carried out service-specific and country-specific, and it must include an assessment of the target country's legislation. 

DLA Piper has developed a tool called Transfer, which serves as an aid to companies in performing data transfer impact assessments. The tool creates comprehensive documentation and a report that enables companies to fulfil their obligations related to data transfers. Although your company's data protection practices might have been updated in 2018 to comply with the GDPR, the Schrems II judgment and the new standard contract clauses create new obligations for companies when transferring personal data to third countries. 

As a result, companies must map their data transfers, apply the new standard contract clauses and, if necessary, carry out transfer impact assessment for data transfers. Based on the findings and results of the transfer impact assessment, companies must furthermore implement and apply supplementary safeguard measures to protect the transferred data.   

In addition, DLA Piper has a large and affordable library of required country analyses for more than 60 countries outside the EU and EEA. With country-specific analyses, companies can fulfil their obligation under transfer impact assessments on assessing target countries' legislation. This greatly facilitates the evaluation of local legislation, and an updated version of the country analysis is always available. 

Read more here (in Finnish). 

Contact us if you need legal advice regarding data transfers to third countries outside EU and EEA. If necessary, DLA Piper's data protection experts handle the data transfer impact assessment for you as a service from start to finish.