Transfers Outside of the EU Clause Samples
The "Transfers Outside of the EU" clause governs how personal data can be transferred from within the European Union to countries outside its borders. It typically sets out the conditions under which such transfers are permitted, such as requiring that the destination country ensures an adequate level of data protection or that specific safeguards, like standard contractual clauses, are in place. This clause is essential for ensuring compliance with EU data protection laws, particularly the GDPR, and addresses the risk of data being sent to jurisdictions with weaker privacy protections.
Transfers Outside of the EU. During the provision of Services under the DPA, it may be necessary for Controller to transfer Personal Data from the European Union, the European Economic Area and/or their member states, the United Kingdom, or Switzerland to Processor in a country that does not have an adequacy decision from the European Commission or is not located in the European Economic Area. In the event of such a transfer, the Standard Contractual Clauses apply as follows:
9.1.1. In relation to Personal Data that is subject to the GDPR (i) Processor will be deemed the “data importer” and Controller is the “data exporter”; (ii) the Module Two terms shall apply where Controller is a Data Controller and where Processor is a Data Processor; (iii) in Clause 7, the optional docking clause shall be deleted; (iv) in Clause 9 of Module Two, Option 2 shall apply and the list of Sub-processors and time period for notice of changes shall be as agreed under Section 5 of this DPA; (v) in Clause 11, the optional language shall be deleted; (vi) in Clause 17, Option 1 shall apply and the Standard Contractual Clauses shall be governed by the member state where Controller is domiciled; (vii) in Clause 18(b), disputes shall be resolved before the courts of the member state where Controller is domiciled; (viii) Annex I and Annex II shall be deemed completed with the information set out in Schedule 1 of this DPA respectively; and (ix) if and to the extent the Standard Contractual Clauses conflict with any provision of the Agreement (including this DPA) the Standard Contractual Clauses shall prevail to the extent of such conflict. For this section, the Standard Contractual Clauses from the Commission Implementing Decision (EU) 2021/914 are incorporated by reference and available here: ▇▇▇▇▇://▇▇.▇▇▇▇▇▇.▇▇/info/law/law-topic/data- protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard- contractual-clauses-international-transfers_en.
9.1.2. In relation to Personal Data that is subject to UK Data Protection Laws, the Standard Contractual Clauses shall apply with the following modifications (i) the contact information about the parties to this Agreement is the contact information for the UK Standard Contractual Clauses (“UK SCCs”); (ii) Controller is the data exporter and Processor is the data importer; (iii) Clause 9 will state, “The laws of England and Wales"; (iv) the Parties do not use the additional commercial clauses; and (v) the information in this Agreement and S...
Transfers Outside of the EU. 4.1 The Processor will not process or transfer any data outside of the EU for processing.
Transfers Outside of the EU. In the course of the provision of Services under the DPA, it may be necessary for Channel Partner to transfer Personal Data from the European Union, the European Economic Area and/or their member states, Switzerland, or the United Kingdom, to Processor in a country that does not have an adequacy decision from the European Commission or is not located in the European Economic Area. In the event of such a transfer, the Standard Contractual Clauses set forth in Schedule 2 shall apply.
Transfers Outside of the EU. Where Users are located outside of the European Union, the European Economic Area or countries providing an adequate level of protection within the meaning of article 45.1 of Data Protection Law, the access to and transfer of Data to the concerned Users will be subject to the entry by the User and UL/LCSB into a data transfer agreement based on the contractual clauses in Annex C. The Data Provider hereby gives power of attorney to, and appoints UL/LCSB (who accepts) as its agent (‘mandataire’) to sign on its behalf such contractual clauses with concerned Users.