On July 7, 2021, the European Data Protection Board (“EDPB”) published draft guidelines on codes of conduct for personal data transfers for consultation.  These guidelines complement the EDPB’s earlier guidelines on codes of conduct and monitoring bodies.  Interested parties had until October 1, 2021 to respond to the consultation.  On February 22, 2022, the EDPB published the final version of the guidelines.

The guidelines focus on the requirements for a code of conduct to be approved as a legal mechanism for transferring personal data outside the European Economic Area (“EEA”) to third countries that do not provide an adequate level of data protection.  They emphasize that such a code of conduct can be used to cover multiple transfers between companies belonging to the same sector and/or carrying out similar processing activities.…

Continue Reading EDPB Publishes Guidelines on Codes of Conduct for Data Transfers