Despite recent developments, there are still numerous questions and uncertainties that arise in the process of data protection. The topic that raises the most questions organizations now is the international transfer of personal data. We often find that organizations are struggling with international data transfers. This ranges from not knowing which transfer mechanism can be used in which scenario, to what is actually required to remain GDPR compliant at all times.

in this white paper, we answer five of the most important questions every organization has when transferring personal data internationally.

• When can you speak of an international data transfer under the GDPR?
• To what extent may the content of the Standard Contractual Clauses be changed?
• Is a Transfer Impact Assessment really necessary?
• What must be included in a Transfer Impact Assessment?
• How does the Executive Order of October 2022 and the EU-US Draft Adequacy Decision impact international data transfers to the United States?