ICO: Draft UK Adden­dum to the Stan­dard Con­trac­tu­al Clauses

The Eng­lish regu­la­to­ry aut­ho­ri­ty ICO has issued a Draft UK Adden­dum to the Stan­dard Con­trac­tu­al Clau­ses published. The adden­dum amends the new EU Stan­dard Con­trac­tu­al Clau­ses (SCC) to cover data trans­fers from the United Kingdom.

The adden­dum is part of a Con­sul­ta­ti­on on future data pro­tec­tion in inter­na­tio­nal data trans­fers. In addi­ti­on to the adden­dum, the fol­lo­wing pro­po­sals are discussed:

• The can­cel­la­ti­on of the (tem­po­ra­ry) appr­oval of the pre­vious SCC;
• a new, tail­o­red to the United King­dom inter­na­tio­nal data trans­fer agree­ment;
• an accom­pany­ing “Inter­na­tio­nal Trans­fer Risk Assess­ment and Tool” and
• Chan­ges to exi­sting UK gui­dance on data transfers.

As of Sep­tem­ber 27, 2021, only the new SCCs are to be used for new con­tracts (we have reports). For inter­na­tio­nal data trans­fer agree­ments with par­ties from the UK, the Adden­dum would be hel­pful. It is con­cise, easy to under­stand, and fle­xi­ble – both in terms of parts of the con­tent and how it can be adopted.