Cross Border Data Transfer Lawyer

Providing Clarity

In An Area Of Increasing Complexity

Data processing and storage are increasingly a global undertaking. Data collected from an individual in one jurisdiction is often processed and stored in another. This global reality presents considerable challenges and complexity in the context of privacy and related regulatory regimes. For example, in the EU, EEA, and UK, the GDPR provides some of the most robust protections with respect to privacy. In contrast, the United States provides less strict protections as things stand.

Moreover, after the invalidation of the Privacy Shield by the Court of Justice of the European Union (CJEU) in the Schrems II decision, what was an already opaque area of the law became even more challenging. While the Data Privacy Framework (DPF) adequacy decision brings welcome clarity,  when it comes to cross-border data transfers, regulatory guidance is in flux, and the global regulatory regimes are incredibly dynamic. At RICHT, we counsel clients on various matters relating to such transfers, including Standard Contractual Clauses (SCCs), Data Privacy Framework (DPF) certification and compliance, as well as supplementary technical measures and other data transfer agreements (DTAs), among a variety of other issues.