Standard contractual clauses for international transfers—2010—controller to processor—ICO templates

The following Information Law precedent provides comprehensive and up to date legal information covering:

  • Standard contractual clauses for international transfers—2010—controller to processor—ICO templates

Standard contractual clauses for international transfers—2010—controller to processor—ICO templates

In brief

This precedent links to:

  1. a template created by the UK Information Commissioner’s Office (ICO) of the ‘2010’ EU Standard Contractual Clauses (also known as Model Clauses or SCCs) originally introduced by Commission Decision 2010/87/EU of 5 February 2010 and originally used for the transfer of personal data from data controllers established in the EEA to a data processor established outside the EEA under the EU’s General Data Protection Regulation (EU) 2016/679 (the EU GDPR). Such SCCs can no longer be used in new contracts under the EU GDPR but may continue to be used as a basis for new or existing international transfers under the United Kingdom General Data Protection Regulation, Retained Regulation (EU) 2016/679 (the UK GDPR). We call this template the ‘original version’

  2. a subsequent template created by the ICO of the same SCCs with further ICO approved specific adaptations made for use under the UK GDPR, which may also be used as a basis for international transfers under the UK GDPR— we call this template the ‘UK GDPR version’

It seems likely many UK organisations will now prefer to use the UK GDPR version (unless they are required to use the original version because the transfer is subject to the very narrow ‘Frozen GDPR’ regime as described below).

The templates provided by the ICO

Popular documents