The European Commission can decide that standard contractual clauses offer sufficient safeguards on data protection for the data to be transferred internationally.

It has so far issued two sets of standard contractual clauses for data transfers from data controllers in the EU to data controllers established outside the EU or European Economic Area (EEA).

It has also issued one set of contractual clauses for data transfers from controllers in the EU to processors established outside the EU or EEA.

EU controller to non-EU or EEA controller

EU controller to non-EU or EEA processor