What are Standard Contractual Clauses (SCCs) in the context of GDPR?
- A.Standard terms for processor agreements within the EU, citing Article 46(2)(c), which treats standard contractual clauses as automatically valid regardless of the destination country's surveillance laws
- B.Clauses requiring data encryption
- C.Standard employment contracts, and the rule requires the prior written approval of the supervisory authority before any erasure occurs
- D.Pre-approved contractual terms adopted by the European Commission that provide appropriate safeguards for international data transfers
Why D is correct
SCCs are sets of contractual terms and conditions approved by the European Commission under Article 46(2)(c) that data exporters and importers can use to ensure appropriate safeguards for personal data transferred outside the EEA.
Know someone studying for GDPR? Send them this one.