Pre-approved contract terms issued by the European Commission that provide a lawful basis for transferring personal data outside the EEA.
Standard Contractual Clauses are model data protection clauses that an exporter and importer of personal data sign to safeguard a transfer to a country without an adequacy decision. They bind the importer to EU-level protections.
Since the Schrems II ruling, organizations relying on SCCs must also assess the laws of the destination country and add supplementary measures where local law could undermine the clauses.
Related frameworks
KaitoSec