Guidance for consultation on data sharing with third-country authorities
The European Data Protection Board (EDPB) has provided updated guidance clarifying the rules for data transfers to authorities in third countries. This includes scenarios where such transfers are governed by appropriate safeguards under EU General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR), such as standard contractual clauses or binding corporate rules. The guidance aims to ensure compliance with GDPR requirements and the Court of Justice of the European Union’s Schrems II judgment, which highlighted the need for robust protections against indiscriminate access to personal data in third countries. The guidelines are subject to public consultation until 27 January 2025.