9. Description of Planned Transfers of Personal Data to Other Countries Outside the EU
If you are planning to transfer data outside the EU – for example, for sharing data with researchers from outside the EU – it is necessary to ensure the appropriate transfer mechanisms are in place, like standard contractual clauses, binding corporate rules, certification mechanism or codes of conduct, or to rely on so-called “derogations” listed on Art 49. Due to its complexity, planned international data transfers should be first discussed with the faculty Privacy Officer and/or legal affairs.
Previous: Description of Measures to Ensure Compliance By Processors and/or Joint Controllers | Next: Obtaining, Consulting, and Dealing with Data Subjects’ Views of the Processing
- Description of the Project’s Purpose
- Description of Data Subjects
- Description of the Categories and Purposes of Personal Data
- Description of the Processing of Personal Data
- Description of Information Provided to Data Subjects
- Description of How Data Subjects Can Exercise Their Data Subject Rights
- Description of Lawful Basis for Processing
- Description of Measures to Ensure Compliance By Processors and/or Joint Controllers
- Description of Planned Transfers of Personal Data to Other Countries Outside the EU
- Obtaining, Consulting, and Dealing with Data Subjects’ Views of the Processing
- Preliminary Risk Assessment